ParentFull threadJoachimSchipper·That's vulnerable to a length extension attack: sha1(passwd|am) can be used to derive sha1(passwd|amazon). (See Wikipedia for a discussion.)Don't try to get clever, just use random passwords.View on HN