3 ms·
> The answers are provided as MD5 checksums of the lower-cased answers which allows you to compare a users response with the answers without explicitally [sic]
by qot 7y ago
> The answers are provided as MD5 checksums of the lower-cased answers which allows you to compare a users response with the answers without explicitally [sic] knowing the answer yourself.
Why bother? All the hashes I tried were able to be instantly cracked online by CrackStation.
If the hashes are kept server-side, then why not use plaintext?
- kristopolous 7y agoNot only, it suggests the false impression that people can do it all client side... If you're sending the answers over the wire, they can simply be sent back to you without any real computational effort. No clever text processing required. Keeping it in plaintext would have made doing this being dumb more obvious. Heck, two separate files would have even been better. Also you can do something like damaru levenshtein [1] on plaintext so you wouldn't have to be a stickler for exact matches [1] https://en.m.wikipedia.org/wiki/Damerau%E2%80%93Levenshtein_distance https://en.m.wikipedia.org/wiki/Damerau%E2%80%93Levenshtein_...