3 ms·
Another reply that doesn't answer my question. Q: Why do you need to know how they store passwords? A: It's not an issue for them to disclose it. What you
by dchest 12y ago
Another reply that doesn't answer my question.
Q: Why do you need to know how they store passwords?
A: It's not an issue for them to disclose it.
What you gain by knowing their scheme? What you gain by knowing if it's secure or not?
- SixSigma 12y agoIn my country (UK), if it is not (reasonably) secure then they would be liable for prosecution. And yes, sorry, I was answering a different question to the one you asked.
- dchest 12y agoAll right, I see: 1) People asking this question are eBay shareholders who are interested to learn if the company they own will be prosecuted by UK government for storing passwords insecurely; the fact of which was discovered after the leak of 145 million user records. or 2) People asking this question are potential plaintiffs wanting to know if they should sue eBay for storing their password without hashing it with some hash function defined by law as secure.