3 ms·

Because having an oracle that can verify if a partial password guess is correct makes it trivially bruteforce-able.

• tptacek 17y ago
  Only if they store more than one combination of characters.