3 ms·
"All user passwords are salted, and encrypted with the powerful bcrypt algorithm, which creates an irreversible hash which cannot be cracked." I appreciate tha
by akerl_ 12y ago
"All user passwords are salted, and encrypted with the powerful bcrypt algorithm, which creates an irreversible hash which cannot be cracked."
I appreciate that they're trying to communicate the strength of bcrypt, but this is more than a bit hyperbolic.
- smoyer 12y agoThat passage also raised the hair on the back of my neck ... I was trying to ignore it when I came across this phrase: "Our restoration process is indeed tamper-proof." (and another fragment from their user documentation). Given the current climate in computer security, I think we should be much more careful about how we phrase our guarantees and more specifically how secure each service is. These statements imply guarantees that are simply impossible to make ... and we've seen flaws in our crypto tools change the security landscape overnight.