3 ms·
> If most sites are salting and hashing passwords correctly Wouldn't it have to be "if all sites are salting and hashing passwords correctly "? I suspect most
by Ajedi32 3y ago
> If most sites are salting and hashing passwords correctly
Wouldn't it have to be "if all sites are salting and hashing passwords correctly "? I suspect most "differentiation algorithms that are trivially runnable in your head" would be easily cracked with a couple examples.
- ethbr0 3y agoI'd hazard no, because 'at scale'. You could mechanical turk puzzle them trivially, but the realistic threat model is tens of thousands of credentials, tried against high value login prompts.