3 ms·
While compromized passwords are one problem, leaking your data is bad in so many other ways as well. Yet almost all focus lies in obfuscating passwords to preve
by strictfp 14y ago
While compromized passwords are one problem, leaking your data is bad in so many other ways as well. Yet almost all focus lies in obfuscating passwords to prevent extraction in the case of a breach. We don't talk as much about securing addresses and SSNs and other sensitive data.
Well guess what, if the attacker has access to your system he can just install a password logger and all your obfuscation would be in vain.
All extra security is added value, sure, but focus on other areas wouldn't hurt.
- chunsaker 14y agoTotally Agree! I wanted to keep the scope for this narrow so it didn't turn into a total beast. The guys over at Cloud Passage have some great content on server security (http://blog.cloudpassage.com/ http://blog.cloudpassage.com/) that I think is really well informed, and we're going to do a followup on backend security.