Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If you throw away the daily random salt (but keep the obscured IP address), how can you check a single value for a match the next day?


Refer to my understanding in the first paragraph—I don’t think they’re retaining the hashed values after a day either? If they are, sure, apply my last paragraph, you can’t do a single match any more. (But the whole thing would still definitely be susceptible to deanonymisation.) But at the very least, it’s easily reversible for up to 24 hours.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: