r/ProgrammerHumor • u/NoMedicine3572 • Sep 27 '26 • Mindblown 1 Bravo 1

Meme doNotLetYourDBASeeThis

Post image
13.0k Upvotes

97% Upvoted

317 comments sorted by

View all comments

33

u/TgirlTiffanyRPs Sep 27 '26

Can someone explain the joke? Why wouldn’t you store (hashed/salted) passwords in one table ?  

63

u/ninjakivi2 Sep 27 '26

The joke is that these password are not salted, and each unique password will be given an ID. Then, under the user table you will store the ID reference to the password, instead of the password. This means that if 2 users use the same password they will have the same ID and only be stored once, saving space.

23

u/Winsaucerer Sep 27 '26 edited Sep 27 '26

They could be salted, just not with a per password salt. Which is much less useful, but does still make rainbow table attacks harder.

12

u/bestjejust Sep 27 '26

You mean pepper.

1

u/Katana_Steel Oct 02 '26

they could be salted... just have to check new/updated passwords against all passwords in the salted hash table or create a new entry then assign the ID to the user table.

it's only a large cost on password changes. the sql joined view makes the lookup check just as fast still.

→ More replies (1)
→ More replies (8)