You are here |
www.sjoerdlangkemper.nl | ||
| | | |
soatok.blog
|
|
| | | | Programmers don't understand hash functions, and I can demonstrate this to most of the people that will read this with a single observation: When you saw the words "hash function" in the title, you might have assumed this was going to be a blog post about password storage. (Passwords are the most common knee-jerk reaction... | |
| | | |
www.malos-ojos.com
|
|
| | | | Seeing all the "your 8-character passwords are dead!" posts and articles gave me a good laugh as that's already been the case. We have been down to reasonable offline cracking times even with... | |
| | | |
pboyd.io
|
|
| | | | Here's a fun list to look through: Dumb Password Rules. Most of the rules seem arbitrary, like only allowing digits, but some hint at deeper problems. For instance, preventing single-quotes. They aren't inserting passwords into a database without a SQL placeholder, right? Nearly every site on that list has a needlessly short maximum password size. If they're storing passwords correctly, there's no need for this. This post will go through a few bad ways to store a password and you can see what I mean.... | |
| | | |
krebsonsecurity.com
|
|
| |