/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 8yd.no
Scramble ramble: Passwords, salt and hash | H.W. Sanden
| | kevquirk.com
How Websites Check Your Password | Kev Quirk
2.1 parsecs away

Travel
| | Ever wondered how websites check your password? I mean, how can they check your password without being able to read it? It's a catch 22, surely?
| | blog.josefsson.org
On Password Hashing and RFC 6070 - Simon Josefsson's blog
2.7 parsecs away

Travel
| |
| | myers.io
Why You Shouldnt Hash on the Client - myers.io
1.7 parsecs away

Travel
| | Every so often I see posts on Stack Exchange, or Hacker News where someone has figured out that their passwords are being sent to the server and the server can see them! The logic that we see is that if the password is hashed client side, then only the hash needs to be sent to the server, so the server never knows the password. Unfortunately, I sometimes even see this go one step further when people suggest that with this arrangement, HTTPS isnt required. Wrong.
| | blog.andlabs.org
Attack and Defense Labs: Cracking hashes in the JavaScript cloud with Ravan
9.8 parsecs away

Travel
| Password cracking and JavaScript are very rarely mentioned in the same sentence. JavaScript is a bad choice for the job due to two primary r...