6 ms·

Alternate title: "Why Python's bcrypt implementation is unsafe for Password Hashing"

• enamya 1y ago
  *used to be unsafe just to note, other implementations have the same design (silent and truncate), I've recently found out that htpasswd from Apache HTTP server has the same silent behavior