this post was submitted on 27 Jul 2023
874 points (98.2% liked)

Memes

45339 readers
3378 users here now

Rules:

  1. Be civil and nice.
  2. Try not to excessively repost, as a rule of thumb, wait at least 2 months to do it if you have to.

founded 5 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] Reliant1087 1 points 1 year ago (1 children)

You could take the old password, change one or two letters and compare the hash to the hash of the new password?

[–] [email protected] 2 points 1 year ago (1 children)

That's the point though.

You're not supposed to have the old password. If you had the old password you could just compare it to the new password.

The only way you can do it is to take the new password and make a hash for every possible single-character variation and compare them all to the old hash

[–] Reliant1087 1 points 1 year ago

Sorry, that's what I meant as well :) Came out upside down when I wrote. We used to figure out shitty ISP router passwords this way by having a table of common passwords and their hashes.