5 ms·
I agree with @stcredzero , the password hash thing is nonsense. If you expose the hashes to allow other people to authenticate your users, which I think the au
by tehwalrus 15y ago
I agree with @stcredzero , the password hash thing is nonsense.
If you expose the hashes to allow other people to authenticate your users, which I think the author suggests, 3rd party sites can simply cache the password the user provides for crunching and have BAM stolen their password.
- pmylund 15y agoIt was a kind of tongue-in-cheek comment to demonstrate the irony of "exposing it doesn't matter". I should probably have been more clear that I wasn't actually serious.