this post was submitted on 18 Aug 2024
830 points (98.8% liked)

Cybersecurity - Memes

1891 readers
2 users here now

Only the hottest memes in Cybersecurity

founded 1 year ago
MODERATORS
830
submitted 3 weeks ago* (last edited 3 weeks ago) by cron to c/cybersecuritymemes@lemmy.world
 

Last week, I tried to register for a service and was really surprised by a password limit of 16 characters. Why on earth yould you impose such strict limits? Never heard of correct horse battery staple?

you are viewing a single comment's thread
view the rest of the comments
[โ€“] wer2@lemm.ee 2 points 3 weeks ago (1 children)

Hashing is more about obscuring the password if the database gets compromised. I guess they could send 2^256 or 2^512 passwords guesses, but at that point you probably have bigger issues.

[โ€“] redxef@scribe.disroot.org 2 points 3 weeks ago* (last edited 3 weeks ago)

It's more about when a database gets leaked. They then don't even have to put in the effort of trying to match hashes to passwords. And that's what hashing a password protects against, when done correctly.