3 ms·
Next up: Replace MD5 with BASE64+ROT13. Significantly worse functionality AND performance, but sounds more secure (to a layman) and doesn't trigger the "MD5" al
by meshaneian 6y ago
Next up: Replace MD5 with BASE64+ROT13. Significantly worse functionality AND performance, but sounds more secure (to a layman) and doesn't trigger the "MD5" alert...
- cortesoft 6y agoYou joke, but an ex-security guy at my company literally told me “this file can’t be in plain text on disk. Base64 encode it”
- skissane 6y agoBase64 encoding does protect somewhat against "looking over your shoulder" attacks (Unless the person looking over your shoulder has a really good memory and can remember the Base64, or decode it in their head. Or they have a camera.)
- mschuster91 6y agoHelps against attackers grepping the whole disk (or any folder named "conf" or similar) for "username", "user", "password", "pass", "key" and friends. It's game over anyway if someone has a shell on your server but at least it complicates their life a bit.