3 ms·
As a HN non-hacker old-timer, I've read plenty of conversations about security and had a vague idea of what the heck y'all were talking about with hashes, salts
by JacobAldridge 14y ago
As a HN non-hacker old-timer, I've read plenty of conversations about security and had a vague idea of what the heck y'all were talking about with hashes, salts etc.
But this post explained it all so clearly, I found it immensely useful to put some of the pieces together. Have already shared it with some of my even-less-technical colleagues so they too can appreciate 1) the complexity, 2) the problem, and 3) the importance of their role in setting passwords. Well written JGC!
- jgrahamc 14y agoThanks for the kind words. For those who are interested in how to do the hash upgrade, I wrote a blog post on my personal site here: http://blog.jgc.org/2012/06/one-way-to-fix-your-rubbish-password.html http://blog.jgc.org/2012/06/one-way-to-fix-your-rubbish-pass...
- nickpresta 14y agoDepending on the framework you're using, if any, there might already be a built-in way to upgrade your users' passwords. For Django: https://docs.djangoproject.com/en/dev/topics/auth/#password-upgrading https://docs.djangoproject.com/en/dev/topics/auth/#password-...