5 ms·
doesn't that mean they are storing plain text/reversible encrypted passwords? I have gmail and facebook accounts way before mobile was invented, if they've adde
by vfistri2 5y ago
doesn't that mean they are storing plain text/reversible encrypted passwords?
I have gmail and facebook accounts way before mobile was invented, if they've added that feature for mobile imho it means password was stored in plain text or with 2 way encryption
- drchickensalad 5y agoYou just store multiple hashes, and don't support it retroactively
- cryptofistMonk 5y agoYou don't even need to store multiple hashes, just check both versions of the submitted password against the one stored hash
- rfw300 5y agoNot at all, you just compute hashes for all of the acceptable forms of the password up front and store those hashes.
- cryptofistMonk 5y agoNot necessarily, it could simply be checking both versions of the password against the hash
- csnweb 5y agoNo, you can just change the password you receive and test several versions against the hash. So you stored your password with a lower first character in 2011 and now you enter it with a captilized first character. They can just hash it like you sent it to them but on top they can also first lowercase it and then hash it and that will then match the hash from the password you used when signing up.
- kaba0 5y agoNo, they most definitely just transform the text to all the acceptable versions, do the encryption and compare it with the encrypted stored one.