Hacker News new | ask | show | jobs
by bawolff 1515 days ago
They are bruteforcing pbkdf2 with too low number of iterations (people are talking about md5, but md5 isn't really the problem here. A memory hard hash would be better [albeit maybe impractical in context], but if you are using pbkdf2, md5 isn't any different from sha256 or whatever else)