4 ms·
How true is this? Bullshit. Sure, it's secure from a front-door perspective. But if say, a future unpatched software vulnerability leads to the password hashes
by Afforess 12y ago
How true is this? Bullshit.
Sure, it's secure from a front-door perspective. But if say, a future unpatched software vulnerability leads to the password hashes being leaked (a when, not an if) the 6 letter password hashes are going to be mighty easy to crack.
- wlesieutre 12y agoFor a system that limits passwords to 6 letters, I bet they weren't hashing them to begin with. But maybe nchlswu fixed that.
- danielweber 12y agoHow often do major US banks have their password tables leaked? When was the last time it happened?
- radicalbyte 12y agoActually, having weird password requirements might make them, on average, more secure. Why? Because the passwords will be different. The average person uses the same password over many sites. The chances of one of those sites being hacked/rogue is 100x higher than the bank getting hit. Weird requirements = different password = more secure.