3 ms·
> exact password is being reused is, by itself, strong mathematical evidence that it's the same user yes, exactly.
by rmtech 8y ago
> exact password is being reused is, by itself, strong mathematical evidence that it's the same user
yes, exactly.
- geofft 8y agoI thought of another way of putting this - a 20-character alphanumeric password is a random 114-bit value. A UUIDv4 is a random 122-bit value (the remaining bits are specified by the UUID spec). If you generate UUIDs for your users, and you don't expect two users to end up with the same UUID, it would be confusing if you somehow expected two users with 20-character alphanumeric passwords to potentially collide. The probabilities are just a factor of 256 from each other.
- Dylan16807 8y ago(119 not 114, there are 62 alphanumerics)