Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
HappyTypist
on Dec 16, 2016
|
parent
|
context
|
favorite
| on:
Yahoo discloses hack of 1B accounts
The other solution (that Yahoo used) is use bcrypt(md5(password)) which allows them to rehash all existing passwords without logging in.
blauditore
on Dec 16, 2016
[–]
I think that's what he described, plus adding a prefix in order to indicate it's been re-hashed.
syncsynchalt
on Dec 16, 2016
|
parent
[–]
That's exactly right, thank you!
Consider applying for YC's Spring batch! Applications are open till Feb 11.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
