We talk about hashes and salt in another episode. You can't cover everything in 1 minute, especially when you want a 5 year old to be able to understand as well.
The text is the transcript, which is intentionally conversational not a formal essay. Maybe it is a good idea for us to change it though.
If your philosophy in life is to ignore learning ideas because you are offended by a grammar error, then you are probably right to skip out, the video isn't targeted at people like that.
Re:Time to Encrypt the Cloud
by dredmorbius on Tuesday February 21, 2017 @08:16PM
(#13702007)
Grammar is an honest signal. It's not surefire, but the scope of errors here portends quite poorly for the material.
Given issues of the modern Web, including the absolute deluge of information, finding credible and worthwhile sources is itself a challenge.
Communication -- writing or otherwise -- should be done for the benefit of the reader or audience. To borrow from another item on HN presently (concerning writing manuals).
"Most websites you use today have fake security. When you log onto their service, your password gets sent up to their proprietary servers. There they check to see if it is correct and grant you access to YOUR data."
"Sure, their servers might be in a top secret location. But the problem is that they know your password. Which means any bad actor, like a rogue employee, a hacker, or a government agency can snoop on your data without you knowing."
This manages to both mis-state how good password practices (hashes and salts) work[1], or what their ultimate failure mode is: your data are still sitting on someone else's server unencrypted. The password, however well hashed or salted, isn't proof against a warrant, hack, insider actions, or poor media disposal.
But given the elementary errors in the text, I'm pretty confident the video is not worth watching.
________________________________
Notes:
1. See e.g., https://www.owasp.org/index.php/Password_Storage_Cheat_Sheet