undefined | Better HN

0 pointsskeeks4y ago0 comments

I would be very deeply concerned if Twitch, a multi-billion dollar company owned by Amazon, does not properly hash and salt the passwords of its users.

0 comments

isbvhodnvemrwvn4y ago

You don't brute force it, you find the password for accounts with the same e-mail in leaks from other sites and try only those.

tyingq4y ago

You can still run those "top billion popular password" lists against properly salted/hashed passwords.

j / k navigate · click thread line to collapse

0 pointsskeeks4y ago0 comments

I would be very deeply concerned if Twitch, a multi-billion dollar company owned by Amazon, does not properly hash and salt the passwords of its users.

0 comments

isbvhodnvemrwvn4y ago

You don't brute force it, you find the password for accounts with the same e-mail in leaks from other sites and try only those.

tyingq4y ago

You can still run those "top billion popular password" lists against properly salted/hashed passwords.

j / k navigate · click thread line to collapse