Timeline for Password storage which avoids privileged insider attack
Current License: CC BY-SA 4.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Apr 14, 2019 at 20:01 | comment | added | Johnny | The problem of weak user passwords is orthogonal to the problem of secure password storage, and is solved by other means. If you allow a user's password to be that weak, an attacker has absolutely no need to crack any hashes anyway. | |
| Apr 14, 2019 at 19:28 | comment | added | PwdRsch | So a user chose "12345678" as their password. What strength of hashing protects that from being cracked? Normal password choices aren't distributed via luck, but by fairly predictable patterns. | |
| Apr 14, 2019 at 14:19 | history | answered | Johnny | CC BY-SA 4.0 |