3 ms·
Well, I'd like to know what scheme they used too, however this is only because of curiosity and my interest in this topic. Some people seem to need (or even de
by dchest 12y ago
Well, I'd like to know what scheme they used too, however this is only because of curiosity and my interest in this topic.
Some people seem to need (or even demand by law) to know the scheme, because they see it as a way to assess their security, however they fail to provide a satisfying answer on why exactly they need this knowledge (even when they are told to change passwords!), and how this will change their assessment.
I probably need to structure my questions like 5 Whys (https://en.wikipedia.org/wiki/5_Whys https://en.wikipedia.org/wiki/5_Whys), providing the first few answers myself:
Q. We need to know the exact password hashing/encryption/storage scheme eBay used.
1. Why? - We need to know if the passwords are easily recoverable.
2. Why? - We need to assess our risks.
3. Why? - ...