 big gregPremium,MVM,Ex-Mod 2005-6
join:2003-10-11
Boston, MA | reply to fire100
Re: Check out http://yaztech.tk said by fire100:
For instance, on my forum, the password is kept in a hash, rather than a standard password.
Someone would have to have a lot of time on their hands, trying to decrypt that hash.
That is true, and good practice, particularly if someone somehow got a copy of your database.
I think what Mospaw  is talking about is someone capturing your password with the intention of trying that same username/email and password combination on other sites, everything from Amazon to BBR to Citibank to (insert your own alphabet of sites here). |
