4 ms·
Recent discussion on HN: http://news.ycombinator.com/item?id=9977399 http://news.ycombinator.com/item?id=9977399
by eddyg 11y ago
Recent discussion on HN: http://news.ycombinator.com/item?id=9977399 http://news.ycombinator.com/item?id=9977399
- juliangregorian 11y agoThis is way, way too prevalent -- people thinking that by doing more things to the password you are being more secure. The bcrypt algo already salts, there's no need to prepend extra stuff. And if you really had 80 chars of preliminary table condiments and your bcrypt implementation truncated at 72 -- well that's just textbook.