4 ms·
Yes, hashed with a salt, as in sha1(password+salt). Of course, then they start hunting for your code/config file/whatever, to find the salt; but it's an extra
by metageek 16y ago
Yes, hashed with a salt, as in sha1(password+salt). Of course, then they start hunting for your code/config file/whatever, to find the salt; but it's an extra barrier.
- 3pt14159 16y agoAh, I had a parsing error while reading your comment and I was confused. I 100% agree with you.
- dedward 16y agoThat's all true - but in production systems, the risk of someone getting ahold of a single password table in a database is differnet than, say, getting the source code to the production system. Just because they have one doesn't mean they have no other. If someone can get all your production code, data, AND configuration settings, you are screwed no matter what you are doing.