4 ms·
IIRC Facebook creates three passwords to deal with character case issues; the one you enter, an inverted case version and a version with the first characters ca
by alistairjcbrown 13y ago
IIRC Facebook creates three passwords to deal with character case issues; the one you enter, an inverted case version and a version with the first characters case inverted.
- jsmeaton 13y agoI'd be very surprised if they created all 3. They probably check the other 2 variations if the first one fails though: if (entered == password || entered.swapcase() == password) .. // etc
- r00fus 12y agoIn order to be performant, since the check is not against your actual password but just against a stored hash (salted/bcyrpted/etc), I wouldn't be surprised if they simply stored all 3 hash results.