3 ms·
While true... this is less of an issue if the breached database includes strongly encrypted passwords with individual salts. At least half of them are going to
by tracker1 2y ago
While true... this is less of an issue if the breached database includes strongly encrypted passwords with individual salts. At least half of them are going to be part of existing breaches, but you aren't going to bother with the rest as it can/will take an exponential amount of time if they are treated properly, leaving top's password safe(ish).
- tomjakubowski 2y agoPasswords can leak in many ways other than database breaches. Malicious front-end code and accidental logging that goes to a public place like an S3 bucket are two examples.
- 9dev 2y agoSo I am supposed to trust that the random forum I have to sign up for to view the solution of a question securely hashes the password I send them? That’s pretty much like handing you car keys to a random person on the street and be confident they will take it to the bank and put it in a locker.
- saghm 2y agoIt's also less of an issue if the passwords never get leaked at all. The question is how much of a bet you're willing to make on the security practices of all of the sites where you have an account following this practice, and at least to me it doesn't seem like a smart.