On: Pandora doesn't hash their passwords

[cbsmith]

...and it is still wrong. They do hash their passwords.

[aiiane → cbsmith]

Encryption is not the same as hashing.

That said, when I said the title was edited, I was not referring to myself editing it.

[cbsmith → aiiane]

> Encryption is not the same as hashing.

UPDATE: http://news.ycombinator.com/item?id=4552358

If mrb is right, it looks like they are storing it locally without encryption, which is indeed bad.

What I had written before seeing that:

======================================

Yes it is not. As a consequence, they are not mutually exclusive.

The title would be correct if it said, "Pandora stores encrypted passwords locally". Guess how much less interesting your post would be with that title? ;-)

They hash their passwords. They encrypt their passwords.

I'd prefer they only did the former, but the fact that they do the former at all is NOT what most people commenting on this thread understand.