3 ms·
It was still reported to HIBP, its probably a worthwhile search.
by bifrost 7y ago
It was still reported to HIBP, its probably a worthwhile search.
- mehrdadn 7y agoOff topic, but I'm amused to see xkcd was hacked. And that its database used MD5 for hashing emails, passwords, and IP addresses!
- bifrost 7y agoReally it was their PHPBB forum heh. MD5 is so lame for passwords tho.
- codedokode 7y agoHashing an IP address (or phone number) doesn't add much security because such hashes are easy to reverse. Better idea is to delete IP address after some short time. You might keep it for a week on month to prevent mass registration, but after that time you don't need it.
- mehrdadn 7y ago> Hashing an IP address (or phone number) doesn't add much security because such hashes are easy to reverse. Only if they hashed them separately.
- deleted 7y ago[deleted]