4 ms·
Can attackers can easily tell the 1 and 500 iteration databases and focus their resources in breaching those ones?
by stubish 4y ago
Can attackers can easily tell the 1 and 500 iteration databases and focus their resources in breaching those ones?
- palant 4y agoDisclaimer: I’m the author of this article. Yes. The number of iterations is presumably stored in the same customers database that they stole. Even if not: the number of iterations can be queried via a public API, anyone can do it if they know the email address.