aadamov

4 ms·

1. 1.▲
   by aadamov 11y ago

   Spot on our trajectory for the last two years
2. 2.▲
   by aadamov 13y ago

   High on emotions. Low on facts and ideas.
3. 3.▲
   by aadamov 14y ago

   Indeed, the assumption is that attacker has limited window of opportunity to grab the data. Taking that as a base assumption, it would make sense two store parts of the hashed password in two separate databases on two separate machines. Hac
4. 4.▲
   by aadamov 14y ago

   But this is why we do one or both things: strip obvious things from hashed password and store them separately or add a trivial character reshuffling algorithm. The point is that hacker would not only have to steal your hashed passwords, but