4 ms·

I think the OP meant "hash them" with something like bcrypt.

• balls187 11y ago
  Which raises the question: should you follow web application advice regarding security from someone who mistakenly uses the word "Encrypt" when they (actually or unintentially) mean "Hash?"
  • brlewis 11y ago
    It's an easy slip of the tongue, either if you don't know very much, or if you've spent too much time reading how the bcrypt hash works internally - https://www.usenix.org/legacy/events/usenix99/provos/provos_html/node4.html https://www.usenix.org/legacy/events/usenix99/provos/provos_...
  • justathrow2k 11y ago
    Yeah, yeah, I think I would. Someone's credibility as a programmer isn't destroyed in my mind because they say encrypt to describe hashing, especially if they are in fact, hashing and not encrypting and understand why. This is something I've seen a lot of developers act elitist about, and it's always rubbed me the wrong way.
    • iolothebard 11y ago
      It's the same in everything. I'd say passwords are "encrypted" in my systems (even though they're salted/hashed). It's like the gun nuts that flip out when someone calls it an assault rifle or a clip instead of a magazine. What can you do, people like showing off how "smart" they are.
      • oldmanjay 11y ago
        Technical jargon is a precise language because it communicates precise concepts. People who do not use it correctly likely have serious misapprehensions and their advice is automatically suspect. Excusing the misuse helps no one.