code-express

4 ms·

1. 1.▲
   by code-express 6y ago

   > this way the site programmer would reverse back to know your number? Author here, and yes that is what I claim. This is actually crypto 101 stuff! 1.) Pre computing SHA256 of a small set of numbers (1111111111 - 9999999999) takes only
2. 2.▲
   by code-express 6y ago

   There are better ways, that involve more computation on the client side. For example, HIBP does not send your password (or its complete hash) to the backend in order to find if it has been previously exposed. They use this method: https:&#
3. 3.▲
   by code-express 6y ago

   The phone numbers put into this website can be trivially reversed despite of the false sense of security the phone-number disclaimer provides: https://code.express/docs/blogs/facebooked/
4. 4.▲
   Best to avoid using the “Have I been facebooked” website(code.express)

   34 points by code-express 6y ago|52 comments