Yes, if you add a (long - at least 32 bit) salt and something like at least 10^9... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

raverbashing on Dec 15, 2016 | parent | context | favorite | on: Yahoo discloses hack of 1B accounts

Yes, if you add a (long - at least 32 bit) salt and something like at least 10^9 rounds of MD5 then, yeah, it's probably ok

Dylan16807 on Dec 15, 2016 [–]

No. I mean single unsalted MD5. You will not crack a 20-random-char password. You cannot process 2^120 guesses, and MD5 is not broken for this use.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact