• barsquid@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    6 months ago

    You’re incorrect. If they salt the hash and use bcrypt it is computationally infeasible for Microsoft to match it against a customer. Or at least expensive enough that Microsoft would insist on warrants and subpoenas.