<story><title>Passwords for 32M Twitter accounts may have been hacked and leaked</title><url>http://techcrunch.com/2016/06/08/twitter-hack/</url></story><parent_chain><item><author>Olscore</author><text>Question: From my understanding bcrypt is designed for security even when the hashed data is leaked. Each piece of data is uniquely salted and hashed to perhaps varying degrees of difficulty. So for a thought experiment, let&amp;#x27;s say a site made the password column of their user database public. Given an entirely public password column, even with associated usernames, would this have any use or decrease the security of those user accounts at all, aside from the obvious that their username is known?</text></item></parent_chain><comment><author>andrewmunsell</author><text>It would allow you to bruteforce the passwords without any sort of rate limiting. So, if you used a dictionary, you probably could get quite a few weak passwords in a short amount of time relative to a system that had proper rate limiting to prevent these kinds of attacks.</text></comment>
<story><title>Passwords for 32M Twitter accounts may have been hacked and leaked</title><url>http://techcrunch.com/2016/06/08/twitter-hack/</url></story><parent_chain><item><author>Olscore</author><text>Question: From my understanding bcrypt is designed for security even when the hashed data is leaked. Each piece of data is uniquely salted and hashed to perhaps varying degrees of difficulty. So for a thought experiment, let&amp;#x27;s say a site made the password column of their user database public. Given an entirely public password column, even with associated usernames, would this have any use or decrease the security of those user accounts at all, aside from the obvious that their username is known?</text></item></parent_chain><comment><author>drrob</author><text>I suppose the main danger is the possibility that someone might, at some point in the future if processing power should suddenly take a leap forward, come up with a way to crack them.</text></comment>