note 68119 deleted from security.database.storage by joey

Note Submitter: dan[ddot) crowley [att]gmail {dott]com ---- A note to the people who think that hashing a password multiple times makes it uncrackable: It doesn't. If you're using a standard hash cracker or rainbow tables, sure. But if you've got the smarts to design your own hash cracker, you can just double-hash every string where it would normally be hashed once, and then at best your hashes take twice as long to crack.