3 ms·
Whilst doing hashed passwords is a no-brainer and it solves process problems like employees emailing passwords to people (who maybe impersonators) I don't think
by rythie 18y ago
Whilst doing hashed passwords is a no-brainer and it solves process problems like employees emailing passwords to people (who maybe impersonators) I don't think it solves all the problems with password security.
Unless you have a strong password policy, john the ripper can often find several passwords (out of 100+) in literally a few seconds by doing dictionary attack, variants and common terms. I would say that someone's hashed password should be well protected as a unencrypted one would be even inside an organization.
- rythie 18y ago...and your both downvoting this because you believe every security problem is solved by having hashed passwords? Another point is, do sites even protect against brute force remote hacking of passwords, Twitter for example got hacked that way. To be clear I believe they should hash their passwords, but it's not the only measure you should take.