Hacker News Reader

I would be very deeply concerned if Twitch, a multi-billion dollar company owned by Amazon, does not properly hash and salt the passwords of its users.

View on HN

You don't brute force it, you find the password for accounts with the same e-mail in leaks from other sites and try only those.

You can still run those "top billion popular password" lists against properly salted/hashed passwords.

Reply on news.ycombinator.com