3 ms·
Its not that black & white either. Many people still use MD5 which isnt reversible but still easily crackable, so where to draw the line ? Nobody would know if
by kayoone 15y ago
Its not that black & white either. Many people still use MD5 which isnt reversible but still easily crackable, so where to draw the line ? Nobody would know if they were using MD5 but the risks would potentially be the same.
The point is, we do NOT know if FON is saving passwords in plain-text based on the provided info.
- Dylan16807 15y agoIt's pretty simple. There are three categories. 1. plain-text or plain-text equivalent: you can access the original passwords in microseconds 2. lousy hashing: you can't tell what the password is immediately but it's computationally feasible to figure it out 3. good hashing: you can't figure out the password The only time you ever need to distinguish plaintext from plaintext-equivalent is when you have a partial data breach. Good hashing is safe even under a full data breach.