Which in itself would be a bad security practice because that would mean that th... | Hacker News

Hacker Timesnew | past | comments | ask | show | jobs | submit

MHard on Nov 23, 2022 | parent | context | favorite | on: “Invalid Username or Password”: a useless security...

Which in itself would be a bad security practice because that would mean that the passwords aren't individually salted.

sgjohnson on Nov 23, 2022 [–]

And they would be hashed using MD5!

But on a serious note, it's possible to individually salt passwords, and still match username & password in one query.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact