4 ms·
Shouldn’t the hash be salted and useless elsewhere?
by andy_ppp 5y ago
Shouldn’t the hash be salted and useless elsewhere?
- netflixandkill 5y agoOutside of the same authentication domain with bad auth token practices (windows) the hash almost always is useless elsewhere. Salting increases the complexity and thus size of hash tables or hash comparison (rainbow tables), but if your manage to break or brute force the entries, salted or not, the secret often is reused by many users.
- tinus_hn 5y agoIn theory, it should. In practice? Who knows.
- par 5y agoIn practice it'll be plaintext stored on someones hard drive.
- csark11 5y agoIt can still be cracked
- andy_ppp 5y agoThis is the SHA 256 of a phrase... go for it! 7BB7DB877943832837046863EF45C252D3A08C92A273F7B665210A6E12701095
- prophesi 5y agoA phrase almost certainly has a lot more entropy than the layman's reused password from other leaks.
- vsareto 5y agoIf this is a phrase to unlock a bitcoin account with 1000 bitcoins in it, then you can easily convince people to try and brute force it. Do you have Amouranth's or xQcOW's salted hash from this leak? Might be worth trying to brute force it. You try on those kinds of accounts because they might have re-used it or the password might be patterned or not completely random, which gives you a chance that the credential might give you access elsewhere.
- DrJaws 5y agogood luck hacking my password horse correct battery staple
- zalequin 5y agoProvided that its hashed with salt / diff methods, sure - but how can you be sure?