Why should I care about hashing passwords anyway?

后端 未结 12 920
南旧
南旧 2021-01-03 23:04

If a hacker has access to the hashes in my DB, he has access to the rest of the information in the DB anyways. So why would he bother trying to decrypt the passwords? Should

12条回答
  •  挽巷
    挽巷 (楼主)
    2021-01-03 23:10

    When a hacker access your database it does not mean that he can access the procedural code, those procedures can alter databases outside the hacked database boundaries or inclusive can alter other procedures.

    By the way now I´m going to ask you something: If a user is hacked and someone has his or her password, how do you make clear that it is not your application or security fault?

    If you don't have stored passwords you don't have such responsability!

提交回复
热议问题