3 ms·
The database containing everybody's PINs will be stolen. Even if you use 8 digit PINs and they are properly hashed, they will get brute-forced rather quickly. A
by mooism2 14y ago
The database containing everybody's PINs will be stolen. Even if you use 8 digit PINs and they are properly hashed, they will get brute-forced rather quickly. Any longer and people will not be able to remember their PINs or will use the same PIN with multiple websites --- exactly the same problems we have with passwords.
(Am I saying that security questions are secure? No.)
- bbissoon 14y agoIf you have to use ALL alphanumeric chars - how can this possibly be brute forced quickly? If you're table of pins is stolen and the information readily connects a user to a pin - that system is horrible from the jump. Human beings attempt to brute force their own pins, most of which have a greater insight into possible combinations and STILL get their account locked. Remember - 3 tries gets you locked. Why would it get broken quicker? If there's something I'm missing, I want to know it for the sake of being a better developer.