5 ms·

I gotta admit, that does seem a bit lacking. I salt MY hashes.

• falsestprophet 17y ago
  Django salts my hashes. It is one of the many virtues of working with a mature framework.
  • e4m 17y ago
    Still allows for brute-force. Distributed.net is bruting (I know that is not a word) approximately 150 billion a second. No one knows what Uncle Sam and other Nation States can do in this regard. So, salt is good, but you still need big passwords (min 72 bits) to keep the big boys out. 6.5 bit-entropy per ASCII char... that means you need at least 11 chars in your password, OK?
    • ajkirwin 17y ago
      I usually use a minimum of 16 for anything that isn't throwaway.