Viewing a single comment thread. View all comments

Dominicus1165 t1_j83t9mx wrote

Reply to comment by FreeWildbahn in Millions of passwords stolen from LastPass earlier than company disclosed: Report by BasedSweet

As Long as the password is not vulnerable to a rainbow table attack

3

FreeWildbahn t1_j84wf1x wrote

For a rainbow table attack you need a hash like the passwd file on linux systems. But we are talking about cracking a password safe.

4

jmpalermo t1_j85whp1 wrote

Any responsible site will salt the password before hashing it which makes rainbow table attacks worthless. Not every site is responsible though…

4

sopwath t1_j87biaq wrote

That’s not what a rainbow table is. Also, rainbow tables are defeated by salting.

2

Dominicus1165 t1_j87obtb wrote

Yeah i know. I meant a dictionary attack… with the dictionary provided by the user and only the correct websites to be found.

1

Toasty27 t1_j881vl9 wrote

Rainbow tables are easily thwarted by salting passwords before hashing. Most systems do this nowadays. Pretty sure LP also does this.

1