5 ms·
Wouldn't a workaround for this be storing the (smaller) hash of a better passphrase, and using that to authenticate once arrive at the "vital bits"? Then again
by acct1771 8y ago
Wouldn't a workaround for this be storing the (smaller) hash of a better passphrase, and using that to authenticate once arrive at the "vital bits"?
Then again...someone complacent enough to get that far behind in infrastructure probably doesn't have any chance of that being thought of/appoved.
- rdtsc 8y ago> Then again...someone complacent enough to get that far behind in infrastructure probably doesn't have any chance of that being thought of/appoved. I see you've worked in the enterprise? :-) Another reason is that nobody knows how it really works. The people who knew have long retired. The fear is updating it will likely introduce subtly new behavior and new bugs that everyone is scared of touching it.