3 ms·
Someone in my company is using MD5 for passwords. This is recent software, like built in the last decade. Passwords were not a mystery to anyone when it was wri
by ReactiveJelly 6y ago
Someone in my company is using MD5 for passwords. This is recent software, like built in the last decade. Passwords were not a mystery to anyone when it was written, at least not anyone who cared about security.
I don't know what to say about it. It's not the first time something dumb has happened, and I'm tired of screaming at the brick wall.
- bawolff 6y agoWell the reason that md5 is a bad choice for that has nothing to do with collisions or this article. Sha-256 would also be a bad choice for that.
- kzrdude 6y agoDepends on how they use it. HMAC-MD5 is not broken, for example. MD5 could potentially be a building block for password hashing still (but it has to be a _building block_)