Comment on Ask HN: My bank stores PIN as plain text, should I be worried?parentComments−gus_massa5ybcrypt already includes salt [1] to prevent the use of rainbow tables. Adding more things is probably not very useful.Anyway, a 4 digits pin numbers have only 10000 combinations, that can be bruteforced almost instantly.(On the other hand, sending it by email is not a good idea.)[1] https://en.wikipedia.org/wiki/Salt_(cryptography)
Comments
bcrypt already includes salt [1] to prevent the use of rainbow tables. Adding more things is probably not very useful.
Anyway, a 4 digits pin numbers have only 10000 combinations, that can be bruteforced almost instantly.
(On the other hand, sending it by email is not a good idea.)
[1] https://en.wikipedia.org/wiki/Salt_(cryptography)