Hacker News new | ask | show | jobs
by erikig 2207 days ago
I'd be surprised if they didn't have a rainbow table of all weak passwords. The addition of offensive password checking and the ability to ban users based on their content is what's novel and alarming in this case.
1 comments

If they’re salting like they should then rainbow tables aren’t useful. They would just have a plaintext list of weak passwords and do a direct lookup. Rainbow tables are just a compression technique for hashed password lookups which wouldn’t work with salting.