<instructions>Your goal is to analyze the following comment and estimate how highly it will be upvoted by the Hacker News community.</instructions><comment><author>andrewmunsell</author><text>It would allow you to bruteforce the passwords without any sort of rate limiting. So, if you used a dictionary, you probably could get quite a few weak passwords in a short amount of time relative to a system that had proper rate limiting to prevent these kinds of attacks.</text><parent_chain><item><author>Olscore</author><text>Question: From my understanding bcrypt is designed for security even when the hashed data is leaked. Each piece of data is uniquely salted and hashed to perhaps varying degrees of difficulty. So for a thought experiment, let&amp;#x27;s say a site made the password column of their user database public. Given an entirely public password column, even with associated usernames, would this have any use or decrease the security of those user accounts at all, aside from the obvious that their username is known?</text></item></parent_chain></comment><story><title>Passwords for 32M Twitter accounts may have been hacked and leaked</title><url>http://techcrunch.com/2016/06/08/twitter-hack/</url></story>
<instructions>Your goal is to analyze the following comment and estimate how highly it will be upvoted by the Hacker News community.</instructions><comment><author>drrob</author><text>I suppose the main danger is the possibility that someone might, at some point in the future if processing power should suddenly take a leap forward, come up with a way to crack them.</text><parent_chain><item><author>Olscore</author><text>Question: From my understanding bcrypt is designed for security even when the hashed data is leaked. Each piece of data is uniquely salted and hashed to perhaps varying degrees of difficulty. So for a thought experiment, let&amp;#x27;s say a site made the password column of their user database public. Given an entirely public password column, even with associated usernames, would this have any use or decrease the security of those user accounts at all, aside from the obvious that their username is known?</text></item></parent_chain></comment><story><title>Passwords for 32M Twitter accounts may have been hacked and leaked</title><url>http://techcrunch.com/2016/06/08/twitter-hack/</url></story>