/explore
|
You are here 
|
www.splitbrain.org | ||
| | | | |
dusted.codes
SHA-256 is not a secure password hashing algorithm |
|
| | | | | ||
| | | | |
pboyd.io
Here's a fun list to look through: Dumb Password Rules. Most of the rules seem arbitrary, like only allowing digits, but some hint at deeper problems. For instance, preventing single-quotes. They aren't inserting passwords into a database without a SQL placeholder, right? Nearly every site on that list has a needlessly short maximum password size. If they're storing passwords correctly, there's no need for this. This post will go through a few bad ways to store a password and you can see what I mean.... |
|
| | | | | ||
| | | | |
blog.ropnop.com
After compromising an OpenNMS server, I recovered salted password hashes. I couldn't find any info online, so I reversed them and wrote a tool to crack them |
|
| | | | | ||
| | | | |
soatok.blog
Programmers don't understand hash functions, and I can demonstrate this to most of the people that will read this with a single observation: When you saw the words "hash function" in the title, you might have assumed this was going to be a blog post about password storage. (Passwords are the most common knee-jerk reaction... |
|
| | | |||
