Hacker News new | ask | show | jobs
by kirankuppa 3325 days ago
If they are simply hashed, rainbow tables can be used to crack them. Password must be salted preferably using bcrypt or something equivalent.
2 comments

A rainbow table is not necessary to crack passwords, and is not able to crack all passwords (even if not salted).

And even if salted, a regular (non-rainbow table) attack will crack some passwords.

They state thatthey weresaltedin the blog post, however, they do not specify through what method.