article thumbnail

Understanding Have I Been Pwned's Use of SHA-1 and k-Anonymity

Troy Hunt

However, what if you could manufacture a hash collision? It's also a slower hashing algorithm; still totally unsuitable for storing user passwords in an online system, but it can have a hit on the consuming service if doing huge amounts of calculations. is the middle one. And for what?

Passwords 123
article thumbnail

The Week in Cyber Security and Data Privacy: 29 January – 4 February 2024

IT Governance

US GAO publishes ransomware report The US Government Accountability Office has published a study into federal agencies’ cyber security practices and, in particular, how prepared they are to mitigate the risk of ransomware. Key dates 31 March 2024 – PCI DSS v4.0 transitioning deadline Version 3.2.1 of the Standard.