3 ms·
IANA security researcher, but isn't it a bad idea to publicly post a list of known-good passwords associated with accounts on your own site? I raised an eyebro
by tbabb 9y ago
IANA security researcher, but isn't it a bad idea to publicly post a list of known-good passwords associated with accounts on your own site?
I raised an eyebrow at the hash/salt table alone.
- bfstein 9y agoMy guess is they forced password resets on those users whose passwords were compromised.