3 ms·
I think you're understating it. You're imagining a scenario where an attacker spears a specific row in the database. A much more likely failure mode is that a b
by CGamesPlay 4y ago
I think you're understating it. You're imagining a scenario where an attacker spears a specific row in the database. A much more likely failure mode is that a bungled database migration simply leaves the doors wide open: all users can now log in with any password.
- donatj 4y agoHmm… You make a very interesting point. I wonder how long it would take for someone to spot and report “I entered my password wrong and it worked anyway” I was thinking of an attacker with specific goals of accessing things who doesn’t want to be found out. Your hypothetical attacker would be more of a general chaos agent. I have certainly encountered far more of the latter.