Hacker News new | past | comments | ask | show | jobs | submit login

Nobody accused them of "not encrypting" [sic] passwords. People accused them of storing passwords in clear text.

These are two entirely different things.

Why? Because passwords should NEVER be encrypted. Passwords are meant to be hashed (with a salt) and the hash (+salt) is what should be stored on their servers.

You really should know better...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: