I get the impression that, even on HN, after some high profile database breach, people still ask "were they using hashed passwords?" rather than "were they usin

I get the impression that, even on HN, after some high profile database breach, people still ask "were they using hashed passwords?" rather than "were they using a key derivation function and if so which one with what parameters?". This tells me that the HN crowd still hasn't got it. My own attempt at this message: http://www.justgohome.co.uk/blog/2014/02/salting-hashing-and-key-derivation.html http://www.justgohome.co.uk/blog/2014/02/salting-hashing-and...