SlurpingPus comments on Skeletor is here to help

[–] SlurpingPus@lemmy.world 3 points 1 year ago (3 children)

Should work alright if the server handles Unicode correctly, and isn't one of those ass sites that put restrictions on the password's length and composition. Hashing functions don't even care if you're feeding them raw binary.

permalink

fedilink

source

parent

hideshow 3 child comments

[–] python@lemmy.world 1 point 1 year ago (2 children)

I.. I hope my passwords are hashed and salted long before they reach the server, so the way it handles unicode shouldn't affect it all that much. The logistical issue I was seeing with emojis was more that some of them look the same but have different Unicodes alltogether, so typing in the same emoji across devices might be tricky if their keyboards default to different codes.

permalink

fedilink

source

parent

hideshow 2 child comments

[–] madjo@feddit.nl 1 point 1 year ago

Oooh hashed and SALTED! I kept peppering the passwords that get sent to my server. Now all I need is to clean up the mess and the mold that all those hash browns leave behind.

permalink

fedilink

source

parent

[–] SlurpingPus@lemmy.world 1 point 1 year ago* (last edited 1 year ago)

Passwords are typically sent to the server and hashed there. I'm a bit hazy right now on the implications of client-side hashing, but it would likely present some security problems.

Edit: at the least, it would allow an attacker to use a leaked password database to log in to the sites, sidestepping the whole hashing thing.

There are protocols that send a hashed or encrypted password instead of plaintext, but they're more complex than just hashing. Iirc they involve a challenge-and-response method.

permalink

fedilink

source

parent