Hacker News Reader

While SSHA2 isnt that bad if they’ve applied a work factor, but that’s probably not the case.

It doesn't matter what algorithm you use to hash passwords when users login if you also store them md5-ed somewhere else!

Tsk, but this was an upgrade from the old log that stored the first three letters of the passphrase.

;)