News for hackers. Stuff that matters.

A comment on Passwords for 32M Twitter accounts may have been hacked and leaked. Parent comment

Re:Passwords for 32M Twitter accounts may have been hacked a... by jfindley on Thursday June 09, 2016 @08:15AM (#11868842)
Yes absolutely this - I was just trying to explain how salts should implemented - in the real world always use something like bcrypt or scrypt that does all this for you.
[ Parent | on HN ]
Re:Passwords for 32M Twitter accounts may have been hacked a... by tim333 on Thursday June 09, 2016 @08:34AM (#11868914)
OK, I think I got my terminology wrong. But my thinking was that as well as using bcrypt or whatever on the info in the database you can add some random value stored in code rather than in the database so if your database is compromised it's still a job for them to crack it. Not quite sure what you call that.
[ Parent | on HN ]
Re:Passwords for 32M Twitter accounts may have been hacked a... by heinrich5991 on Thursday June 09, 2016 @09:06AM (#11869084)
A pepper.

https://en.wikipedia.org/wiki/Pepper_%28cryptography%29

[ Parent | on HN ]