4 ms·
Step 1: Install Step 2: Add to INSTALLED_APPS Step 3: Enjoy more secure password hashing. ... Step 4: Set BCRYPT_ROUNDS to something higher than 12 when com
by stevelosh 16y ago
Step 1: Install
Step 2: Add to INSTALLED_APPS
Step 3: Enjoy more secure password hashing.
...
Step 4: Set BCRYPT_ROUNDS to something higher than 12 when computers get faster.
- nicksergeant 16y agoYou sir, are a machine. Steve started working on this 3 feet behind me a little less than 2 hours ago.
- jezdez 16y agoIt took him two hours to monkey patch a few methods?
- nicksergeant 16y agoI left a few minutes after he started. He very well might've been banging his head against other (client-related) issues within those two hours.
- stevelosh 16y agoActually the code was already written -- see the bottom of the README. It took about 30-40 minutes to: * Add the BCRYPT_ROUNDS setting. * Remember how to allow for an optional setting (`if foo in settings` and `settings.get(foo, default)` don't work). * Add the setup.py file. * Write a README. * Test with a real Django site to make sure nothing was broken. * Create and push to repos on BitBucket and GitHub.
- TravisLS 16y agoHow handy. Thanks for putting this together and instantly shortening my to-do list.