51–55 of 55 posts
Earlier quoted context omitted.
They usually use less than one bit per password.
People here don't know what rainbow tables are. If you asked them to build a rainbow table, you'd get... a table. (You're right.)
Earlier quoted context omitted.
Microsoft Active Directory servers store passwords as plain MD4 hashes. http://16s.us/ms_ad_hashes/ These servers are used by governments and large organizations all over the world.
I would like to assume that the REALLY big companies like Google, Microsoft, Apple, Amazon, etc. can figure out how to effectively store passwords. While I acknowlege that Active directory is a bit different from a web service, if this can't be realized, god knows what's happening with the other 500 sites we all have accounts on (that invariably use shared passwords: http://xkcd.com/792/ ). I really love it when I ge…
Or should I be siccing Krell monsters on the good Commander again?
What do people think about outsourcing your authentication to someone else? Full Disclosure: I'm currently working on a brandable authentication host ( http://www.authic.com ) that will outsource the pain of storing your password hashes securly and provide your web app with slick a user account UX.
My risk from any given service is relatively low. My passwords are strong enough (trillions to quintillions of years brute-forcing time per the online calculator's I've checked -- with similarly constructed passwords, not my actual ones, natch) that risk of bruting a hashed key is low, and I don't re-use passwords. For services that store passwords in cleartext (still fairly common practice on mailing lists), no big loss either.
Earlier quoted context omitted.
People here don't know what rainbow tables are. If you asked them to build a rainbow table, you'd get... a table. (You're right.)
Thank you for the contentless comment. Instead, you might consider offering a more interesting algorithm, its tradeoffs, and why it is beneficial to take more computation time?
"And one amusing detail – although eHarmony implores its users to use strong passwords including both upper and lower case letters, it saves the passwords in all upper case" This is truly beautiful - made my day :)