Earlier quoted context omitted.
(sticking with the obliviousness for a moment,) Would they need to store the plaintext password? Hashing every word typed isn't efficient but it's possible to achieve without knowing the plaintext. It reminds me of Facebook allowing login even when you've mistyped your password: https://security.stackexchange.com/questions/214814/why-can-...
> Hashing every word typed Wouldn’t work if your password contains spaces.
Don't write long comments. Show some love to HN's server carrying its O(n^2) burden.