3 ms·
You would, however, have plaintext copies of every piece of other sensitive information in that database. Who cares is passwords are harder to brute force, onc
by technion 11y ago
You would, however, have plaintext copies of every piece of other sensitive information in that database.
Who cares is passwords are harder to brute force, once an attacker has walked away with everything in the OPM leak?
Don't get me wrong, I'm hugely in favour of hashed passwords. But with this sort of data it's a long way from making a complete database leak a nonissue.
- carbocation 11y agoI was responding to a comment about plaintext login credentials. I'm not claiming that bcrypting passwords somehow makes a database full of exquisitely private details somehow unimportant.