makulit

4 ms·

1. 1.▲
   by makulit 17y ago

   He said he was using SHA1 which to me is not an implication. Is SHA1(k.nonce,password) not a form of SHA1? All you had to do was say, with the information available, you would not have been able to determine the password. On a different n
2. 2.▲
   by makulit 17y ago

   Actually I thought I paraphrased it pretty well but to I guess a direct quote is better. "The config salt isn't present in my post -- I'm assuming a database breach, like that which usually occurs. The digest does include a config salt, of
3. 3.▲
   by makulit 17y ago

   Jmilikin already stated the config salt is not present, that the password IS 4 ASCII digits and he assumes a database breach. Isn't it up to the attacker to figure out the rest of the details? As an attacker, do you think he has a separate