> We want to make password cracking extremely difficult. It's a problem a big site should want to throw some money at. Maybe we should start heading back in th

> We want to make password cracking extremely difficult. It's a problem a big site should want to throw some money at. Maybe we should start heading back in the other direction, like making our stacks secure and not expecting a data leak in the first place. Sure be prepared with your time/memory hard hash constructs, it's not a solution to writing insecure code in the first place.