Comment by dataflow
That's not how it works. The combination of valid inputs is a small set. You just try each one until you get the hash.
That's not how it works. The combination of valid inputs is a small set. You just try each one until you get the hash.
It's not all that small, although probably small enough to make a rainbow table or something.
You would have to maintain the code to generate character-perfect strings (or maybe just keep a very large library of the current most popular ones) and also make sure you have the up to date API key salt values (which they probably going to start rotating regularly), which–as I said before–wouldn't be impossible, just prohibitively irritating to maintain for comparatively little benefit.
And besides, it won't be too long before people just start spoofing the hash too, probably shorter than getting the generator up and running