3 ms·
this series of articles has been brilliant so far! it takes a relatively obscure concept that people dont always know / understand (even surprisingly many withi
by kamakazizuru 14y ago
this series of articles has been brilliant so far! it takes a relatively obscure concept that people dont always know / understand (even surprisingly many within the hacker world) - and makes it so simple to understand! great job - I wish people with skills like yours taught at university!
- jgrahamc 14y agoWhen I've written the last one I'll try to put all four together into a simple PDF with illustrations.
- silverbax88 14y agoReading these articles, I already implemented salts in my code, but I never realized that I have been implementing them incorrectly.
- SoftwareMaven 14y agoWhich is why crypto should be left to reviewed experts. It is painfully easy to get wrong, and when you get it wrong, the result is usually a crack able system.
- silverbax88 14y agoI'm not doing custom encryption. I'm not sure why you would think that.
- stouset 14y agoStop what you're doing, and just [use bcrypt](http://codahale.com/how-to-safely-store-a-password/ http://codahale.com/how-to-safely-store-a-password/). The fact that you've gotten it wrong already (when you probably thought you knew what you were doing) should be a strong wakeup call. There's always an attack you didn't know about or a countermeasure you didn't think of.
- silverbax88 14y agoI already use bcrypt, along with several other suites.