that doesn't explain anything. they shouldn't be uploading unsalted hashes eithe... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		8n4vidtmkvmk on Dec 1, 2022 \| parent \| context \| favorite \| on: Lastpass Security Incident that doesn't explain anything. they shouldn't be uploading unsalted hashes either. and if it's salted, it won't match with any database

wizofaus on Dec 1, 2022 | [–]

True, the best solution is to download the list of hashed "bad passwords" and check if the one entered matches against that.

neevans on Dec 1, 2022 | [–]

if salted hash is leaked then it doesn't matter and does not need to be detected anyway.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact