refucktoring

3 ms·

1. 1.▲
   by refucktoring 13y ago

   I think: hash the original version only, then when trying to log in, try both case-as-is and then flipped case
2. 2.▲
   by refucktoring 13y ago

   Of course ethical devs would store like that. Ethics kinda goes out the window when, as a company, you get two choices: play ball with the local law or take your business out of the country. My point was that, due to human error, sometimes
3. 3.▲
   by refucktoring 13y ago

   I stand corrected, I updated the post.
4. 4.▲
   by refucktoring 13y ago

   I was talking about this kind of message that I have seen now and again: http://2.bp.blogspot.com/-plZIT-fl38U/TmDPRms52ZI/AAAAAAAAAJ... Maybe the assumption that they're storing plaintext isn't that sol
5. 5.▲
   Ethics of storing incorrect login attempt credentials?(refucktoring.com)

   10 points by refucktoring 13y ago|18 comments