2 ms·
yikes? that means they knew your password therefore able to truncate it to 10 characters?!
by alliao 5y ago
yikes? that means they knew your password therefore able to truncate it to 10 characters?!
- iso1631 5y agoNot neccersarily, if the previous version truncated the passed password to 10 characters, hashed, then stored, but the new version no longer truncated, the hash wouldn't match unless you used 10 characters if your password was qwerty123456, it might have allowed you in with qwerty1234999
- qwertox 5y agoI assume it was like iso1631 commented, that before the upgrade they truncated it before hashing it. In any case, using a password (=encrypting database) was optional, so my reaction to this experience was to remove the password and move the entire application into a VeraCrypt container.