6 ms·

The combination of email address + password (even hashed in some way) isn't quite as public anymore. Not having any personally identifying information doesn't

• tormeh 12y ago
  Hm... Couldn't you just sign in by using only your email without any password or any other extra stuff? I mean, it's not like there's any sensitive information there. Could lead to some trolling, but I think trolls and Project Euler don't have much overlap. In some cases I think it's valid to ask "why security?".
  • superuser2 12y ago
    Euler has forums. Most likely you'd be looking at huge spam/abuse problems. For the core functionality, though, it might be okay.
• mikeash 12y ago
  I think this is the key point. Security for relatively obscure and unimportant sites isn't really about those sites, it's about other sites. People reuse passwords a lot. They shouldn't, of course, but you can shout that from the rooftops all week and it won't change the fact that a lot of people do. If you suffer a significant breach, then a decent percentage of users will have their bank accounts put at risk from it. You can simply put the blame on the dumb users who reused passwords, but it's reasonable to want to do more.
• hyperpape 12y ago
  This is a good point, and a reason to do the right thing with regard to emails--which is to store a safe version of them (bcrypt). Because while an email and a password is not public information, a username and a password isn't public information either. If you don't trust yourself to store the former, you shouldn't trust yourself to store the later much either.
  • dragonwriter 12y ago
    Particularly, the same kind of threat to other accounts belonging to the same person exists with username/password combinations as with email/password combinations; after all, people reuse username/password combos as much as email/password combos. So, the same general class of people who you endanger by not storing email/password securely are endangered if you stop storying email and just have username/password. And a lot of that class will have emails that can be quickly guessed by appending one of "outlook.com", "gmail.com" or some other popular free-webmail provider to the username, because if they reuse usernames and passwords, its quite likely they do it on their mail site and that they have a webmail provider. So while what Euler has done clearly has a significant convenience impact, it has negligible security impact.
  • stouset 12y ago
    Using bcrypt on email addresses is pants-on-head retarded. Please stop cargo-culting cryptography. How do you propose to look up accounts by email address if they use a salted hash? You would have to bcrypt the email against every row in the database until you found the correct one. If you use a username to do the lookup instead, why store the email address at all? You can't use it for anything.
    • girvo 12y ago
      This, so much this. I'm super confused as to why we are having a discussion about hashing emails?
    • hyperpape 12y ago
      You're right and wrong. Right because it's a crazy idea. Wrong, because it's the logical conclusion of the belief that emails must be treated with as much care as passwords. If you really think that, then you need to encrypt them, and therefore you have to give up the ability to look up user accounts by email address. All you could do is verify that a user-submitted email is associated with a user-submitted account. That's where you end up when you have that sort of paranoia about email addresses. But that conclusion is, like you said, absurd, and I never should've implied otherwise. I wasn't thinking when I wrote it.