News for hackers. Stuff that matters.
Re:Disqus Security Alert: User Info Breach by tptacek on Friday October 06, 2017 @08:53PM (#15421595)
I don't want to be too much of a jerk about this because I get that this is an expert subject but if the best among you were recommending salted SHA-anything in 2012, the best among you were committing professional malpractice.

Honestly, I feel like when we wrote that dumb bcrypt post in 2007, it was already a bit negligent to be using unstretched general purpose hashes for password storage. The BSD's used better hashes in the 1990s.

There are no comments on this comment yet.