5 ms·
What do you do if some website requires you to change your password for some reason? Of course you could use an alternate method - like reading vertically inste
by ComplexSystems 3y ago
What do you do if some website requires you to change your password for some reason? Of course you could use an alternate method - like reading vertically instead of diagonally for that one website - but now you need to remember how many passwords each site has made you generate.
- ethbr0 3y agoIterate a pre/suffix number? I've never had a site do any substring historical matching.
- yomlica8 3y ago> I've never had a site do any substring historical matching. Would this even be possible if the password is properly stored after salt+hash?
- ethbr0 3y agoGood point. No. (Slurps more coffee)
- augusto-moura 3y agoTechnically yes, you could hash every substring of the new password and check them against the database. But is probably too much trouble for what is worth it
- pkulak 3y agoOr if your random selection happens to be all lowercase chars and the site flips out? Companies are too stupid about password requirements to make a scheme like this work, unfortunately. I've tried it, but a good password manager is what's actually worked in the real world.