2 ms·
They must have some advanced crypto where the customer support person can only see the first 2 letters but the rest of password remains securely hashed...
by infinite8s 14y ago
They must have some advanced crypto where the customer support person can only see the first 2 letters but the rest of password remains securely hashed...
- a_bonobo 14y ago:) Even if it were securely hashed, giving out the first 2 letters reduces the range of guesswork substantially, especially when combined with wordlists. Also, the service-guys have to see my password, after all, they are immediately able to tell me whether I "guessed" the right password. I don't believe there is any hashing going on, after all, the bank in question is ANZ, they don't even use TANs for online-banking.