Hacker News new | ask | show | jobs
by skeeks 1717 days ago
I would be very deeply concerned if Twitch, a multi-billion dollar company owned by Amazon, does not properly hash and salt the passwords of its users.
2 comments

You don't brute force it, you find the password for accounts with the same e-mail in leaks from other sites and try only those.
You can still run those "top billion popular password" lists against properly salted/hashed passwords.