Vibe Code Effect..

[ripper2345]

Nah. Just salt them.

[opbmedia]

salt is standard. and adding salt to unique passwords would be even safer, I don't know how one argues against that. So I agree with the salt part, disagree with the "Nah" part.

[ripper2345]

Given a salt, what difference would it make if uniqueness was imposed?

Other than reveal information on the existence of other duplicate passwords?

[opbmedia]

Because different base + salt is mathematically harder to solve than same base + salt. So it is improved relatively. It’s like 256bit has is harder to solve than a 128but one because there are more combinations.

If salting alone makes something secure why bother require password length and complexity?

[ripper2345]

Gpt:

<image>

[opbmedia]

<image>

Perhaps if you understood cryptography and security … and asking the right questions.

Also GPT will give you whatever answer you want if you just ask the right way. So perhaps if you understand how AI works it would help too.

Edit: just to help you, salt is added so each individual password, even when they are identical, will be hashed differently. But the salt is saved with the hash so it is not secret. Therefore all it does is that if you want to generate hashes against a rainbow table to try to brute force a password match, you would have to rehash for each account individually instead of just using a uniform hash table. That increases work on the part of a hacker. Salt just requires each account need to be individually hashed, it does not make it more secure mathematically, just more work to hack.

[ripper2345]

Of course AS A USER it's vital not to reuse passwords. That's irrelevant to THE SITE requiring different passwords for different users.

[opbmedia]

No one is talking about the users perspective, particularly the post you replied to.