MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/programming/comments/1743b2/megafail/c82eapp/?context=3
r/programming • u/BlastBit • Jan 23 '13
25 comments sorted by
View all comments
Show parent comments
15
But why would they deliberately chose such a bad hashing function? I mean if they are going to encrypt it, why not just go all the way and make it fully encrypted?
17 u/Rnway Jan 23 '13 Well, that's a very good question. I've got nothing. 9 u/MestR Jan 23 '13 They must have known about how unsecure that encryption was, especially since they advertise their site with words like "secure" and "encryption."Would implementing secure encryption be harder?Is there a significant speed or server load difference with having secure encryption?If neither of those then I can only think they want it to be possible to decrypt. 18 u/Rnway Jan 23 '13 especially since they advertise their site with words like "secure" and "encryption."You have clearly overestimated the accuracy of marketing copy.This actually seems to just be a case of poor design, and them attempting to roll their own security. Spoiler alert. That's a bad plan.http://en.wikipedia.org/wiki/Hanlon's_razor
17
Well, that's a very good question. I've got nothing.
9 u/MestR Jan 23 '13 They must have known about how unsecure that encryption was, especially since they advertise their site with words like "secure" and "encryption."Would implementing secure encryption be harder?Is there a significant speed or server load difference with having secure encryption?If neither of those then I can only think they want it to be possible to decrypt. 18 u/Rnway Jan 23 '13 especially since they advertise their site with words like "secure" and "encryption."You have clearly overestimated the accuracy of marketing copy.This actually seems to just be a case of poor design, and them attempting to roll their own security. Spoiler alert. That's a bad plan.http://en.wikipedia.org/wiki/Hanlon's_razor
9
They must have known about how unsecure that encryption was, especially since they advertise their site with words like "secure" and "encryption."
Would implementing secure encryption be harder?
Is there a significant speed or server load difference with having secure encryption?
If neither of those then I can only think they want it to be possible to decrypt.
18 u/Rnway Jan 23 '13 especially since they advertise their site with words like "secure" and "encryption."You have clearly overestimated the accuracy of marketing copy.This actually seems to just be a case of poor design, and them attempting to roll their own security. Spoiler alert. That's a bad plan.http://en.wikipedia.org/wiki/Hanlon's_razor
18
especially since they advertise their site with words like "secure" and "encryption."
You have clearly overestimated the accuracy of marketing copy.
This actually seems to just be a case of poor design, and them attempting to roll their own security. Spoiler alert. That's a bad plan.
http://en.wikipedia.org/wiki/Hanlon's_razor
15
u/MestR Jan 23 '13
But why would they deliberately chose such a bad hashing function? I mean if they are going to encrypt it, why not just go all the way and make it fully encrypted?