/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 blog.heckel.io
Snippet 0x0A: Cryptography DOs and DON'Ts | Philipp's Tech Blog
| | myers.io
Why You Shouldnt Hash on the Client - myers.io
2.9 parsecs away

Travel
| | Every so often I see posts on Stack Exchange, or Hacker News where someone has figured out that their passwords are being sent to the server and the server can see them! The logic that we see is that if the password is hashed client side, then only the hash needs to be sent to the server, so the server never knows the password. Unfortunately, I sometimes even see this go one step further when people suggest that with this arrangement, HTTPS isnt required. Wrong.
| | sergioprado.blog
Introduction to Embedded Linux Security - part 1 - sergioprado.blog
1.6 parsecs away

Travel
| | This article is going to be an introduction to embedded Linux security.
| | educatedguesswork.org
A look at password security, Part II: Web sites
2.9 parsecs away

Travel
| | [AI summary] This article discusses password security challenges on websites, focusing on vulnerabilities like remote attacks, password reuse, phishing, and the importance of secure password storage and authentication methods.
| | www.sjoerdlangkemper.nl
Requirements for iterative password hashing
14.8 parsecs away

Travel
| To securely store passwords they should be hashed with a slow hashing function, such as PBKDF2. PBKDF2 is slow because it calls a fast hash function many times. This blog post explores some properties that the iterations must have to be secure.