3 ms·
I assumed everyone salts their memorised passwords. Like you add something that's a function of the thing you're logging into, in a way that's not atrociously o
by Y_Y 2y ago
I assumed everyone salts their memorised passwords. Like you add something that's a function of the thing you're logging into, in a way that's not atrociously obvious. I think (hope) that anything beyond "superpassword1+facebook" is going to be adequate to stop a successful phish cascading to other accounts.
- thaumasiotes 2y ago> I assumed everyone salts their memorised passwords. Like you add something that's a function of the thing you're logging into, in a way that's not atrociously obvious. You're thinking of something other than salting. A salt isn't secret. The point is to make sure that the same password on two services, or on two users of the same service, doesn't have the same hash each time.
- Y_Y 2y agoYou're dead right. It was an improper use of a specific technical term and that sort of thing is very annoying. Thank you for your service.
- autoexec 2y agoThat only matters if you reuse a memorized password. If I have my hacker news password memorized but never use it for anything else there's no need to worry about it.