The company I work for took on a contract to support a large order processing system. As part of the initial system audit, I noticed that the passwords stored in the database are actually a password hash.
Essentially:
string pwd = "some pasword";
string securePwd = pwd.GetHashCode();
My question is: is it safe or not?
I don’t like it, but I don’t know how GetHashCode works. I would rather use something like an MD5 hash, but if I spend my time, I will not worry.
source
share