Discussion

Why reset passwords for salted hash leaks?

I noticed that after the recent Twitch leak people suggested changing passwords for both Twitch and other sites where you use the same password.

I feel like I'm missing something obvious but given that they only stored a salted hash, how can hackers get your password? My understanding is that using a salted hash should prevent them from using either a rainbow table or dictionary attack.

4 points rifung 5 years ago 3 comments

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton