3 ms·
and that is exactly how we get clowns like linkedin storing all of their passwords as unsalted hashes...
by yaur 13y ago
and that is exactly how we get clowns like linkedin storing all of their passwords as unsalted hashes...
- hga 13y agoSee my other comment on starting with "published and studied systems that are thought to be correct". Salting your passwords has been state of the art for so long I can't remember when I first heard of it. LinkedIn was not adding any sort of reasonable defense in depth security through obscurity, but foundational gross negligence.