|
You are here |
ankane.org | ||
| | | | |
pboyd.io
|
|
| | | | | Here's a fun list to look through: Dumb Password Rules. Most of the rules seem arbitrary, like only allowing digits, but some hint at deeper problems. For instance, preventing single-quotes. They aren't inserting passwords into a database without a SQL placeholder, right? Nearly every site on that list has a needlessly short maximum password size. If they're storing passwords correctly, there's no need for this. This post will go through a few bad ways to store a password and you can see what I mean.... | |
| | | | |
greg.molnar.io
|
|
| | | | | A pull request on Rails and Devise triggered me to write this blogpost. | |
| | | | |
abuisman.com
|
|
| | | | | Blog about solving problems with code, mostly Ruby, and other things I have learned working as an engineer and a technical leader | |
| | | | |
qsantos.fr
|
|
| | | [AI summary] The article discusses the security implications of client-side password hashing, arguing that it can be secure when combined with memory-hard functions and proper implementation. | ||