$ 0 0 What if your authentication system itself were at fault? You could have the hardest-to-guess password, salted and hashed thousands of times, and still be at risk. That's what happened to MySQL and MariaDB.