3 ms·
Good question, but perhaps it's shorthand for "your password generates a hash matching that generated by passwords found in various stolen password lists in cir
by podperson 14y ago
Good question, but perhaps it's shorthand for "your password generates a hash matching that generated by passwords found in various stolen password lists in circulation".
- Jabbles 14y agoIn which case they're not hashing the password properly, they're likely checking the plaintext password as it's sent over HTTPS.
- deleted 14y ago[deleted]
- podperson 14y agoThey do not need to transmit plaintext passwords, they merely need to pick when and how to salt each password carefully. What they can't do is randomly salt each stored password.