4 ms·
I don't understand the threat model there. Wouldn't nearly all hacks that lead to plain text passwords also allow the hacker to access all the login-protected d
by iudqnolq 4y ago
I don't understand the threat model there. Wouldn't nearly all hacks that lead to plain text passwords also allow the hacker to access all the login-protected data, making a more secure login process pointless?
- bb88 4y agoNot necessarily. It's common practice for a hacker to break into a site, grab the passwords, then sell them or release them on the dark web. The methods they used to break into the site are often considered "trade secrets".