3 ms·
>plus anything else where the user used the same password Assuming the service is storing unsalted password hashes that can be cracked using a rainbow table, o
by kyllo 14y ago
>plus anything else where the user used the same password
Assuming the service is storing unsalted password hashes that can be cracked using a rainbow table, or (god forbid) plaintext passwords, right?
- drivebyacct2 14y agoIf I have compromised a server, it's pretty trivial to have login.php also POST a copy of the raw user/pass to my server if I wanted.