This is how much effort it takes to have a BCrypt (strong, slow, salted hash) database user system in Spring (not that they used Spring): <http auto-config='

This is how much effort it takes to have a BCrypt (strong, slow, salted hash) database user system in Spring (not that they used Spring): <http auto-config='true'> <intercept-url pattern="/**" access="ROLE_USER" /> </http> <beans:bean class="org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder" id="passwordEncoder" /> <authentication-manager> <authentication-provider> <jdbc-user-service data-source-ref="dataSource" /> <password-encoder ref="passwordEncoder" /> </authentication-provider> </authentication-manager> StackExchange's AskUbuntu.com is pretty good, as you can use OpenId, and if someone (illegally) hacks Google we are all fucked anways.