4 ms·
> The danger is that they crack the server and get the list of password hashes This isn't an argument either way. The service poorly handling passwords is even
by ominous_prime 16y ago
> The danger is that they crack the server and get the list of password hashes
This isn't an argument either way. The service poorly handling passwords is even more culpable than the user with poor password complexity. Passwords should never be stored as plain hashes.
- pavel_lishin 16y agoDid he imply that they were unsalted?
- ominous_prime 16y agoNo, he did not :\. I was reading into it too much, and inferred he was wandering towards the rainbow-tables fallacy.