3 ms·

Was I reading it wrong, or does the system actually store a clear text copy of the password instead of a hash?

• Towaway69 3y ago
  It would appear to be clear text with the assumption that no one can login onto the device. I assume the manufacturer makes this assumption.
  • galangalalgol 3y ago
    Storing a salted hash would be nice, but scopes without ntp or internal wall clocks are the norm, so not sure what to salt with. And a plain hash is pretty easy to beat right? As far as getting the hash, these are people who are using oscopes, it doesn't seem unlikely they could jtag it out without some decent safeguards in place. Worrying about physical security on an oscope seems like a bad risk management trade.
    • mlyle 3y ago
      > so not sure what to salt with Scopes have massive amounts of true random data at their disposal. :P This isn't a nonce where you might need some kind of special timing properties. We hash so that people can't grab your password and use it elsewhere. We add some salt to make the hash more robust to memory and precomputation attacks.