3 ms·
> What are they doing that you can't do? I highly doubt your engineer is doing proper cryptographic handling of data like they do.
by junon 3y ago
> What are they doing that you can't do?
I highly doubt your engineer is doing proper cryptographic handling of data like they do.
- 8organicbits 3y agoLastPass hasn't been doing proper cryptography, so that part may be a fair bet. If you use Django's default hasher, for example, you get more hashing rounds in the default config and they increase those periodically (the latter part that LastPass is struggling with, per the article). https://github.com/django/django/blob/650ce967825aa192222391bfe3003c8d97e6f1d0/django/contrib/auth/hashers.py#L316 https://github.com/django/django/blob/650ce967825aa192222391...