6 ms·

>This is just a way to create a slightly more complex password, if it's stored as a fast hash (like md5) then it's still going to be very easy to crack. It's n

>This is just a way to create a slightly more complex password, if it's stored as a fast hash (like md5) then it's still going to be very easy to crack. It's not about storage, it is about how to get people to use different passwords. Arguably, the passwords are not very different, but what matters is that they are no longer identic Its still good advice to people who use the same password on all their accounts. 'just prefix the password with the first three letters of the hostname' will make sure they're slightly better protected in case of a password leak.

jameswyse 14y ago
We can all agree it's better than using the same password on every site, but the people who do this are very unlikely to adopt such a system. Try explaining this to a small child or elderly person, it's just not going to work. The technology to do away with passwords all together already exists, we just need the right people (lets face it, it's probably going to be google) to standardise and implement it. It's no easy job but in my opinion is necessary for the web to move forward.
smoyer 14y ago
'just prefix the password with the first three letters of the hostname' ... I just changed all my passwords so they're prefixed with 'www' but I'm not sure how that will help make them more secure. (j/k)