News for hackers. Stuff that matters.

A comment on Crowdsec: A Fail2Ban alternative written in Go. Parent comment

Re:Crowdsec: A Fail2Ban alternative written in Go by Philippe_H on Monday October 19, 2020 @02:32PM (#24829369)
Well hashing is (usually) a symmetric function and we are open source... Meaning you could recover the key in the code (or intercept it during transfer). I think Private/Public key is a simpler approach, reusable elsewhere in the code and it's known to be safe. But I'm not the CTO either, I could be mistaken.
[ Parent | on HN ]
Re:Crowdsec: A Fail2Ban alternative written in Go by floren on Monday October 19, 2020 @04:45PM (#24830812)
Hashes aren't symmetric and don't use a key.
[ Parent | on HN ]
Re:Crowdsec: A Fail2Ban alternative written in Go by genuinebyte on Monday October 19, 2020 @05:17PM (#24831132)
Here, I found this really useful to understand hashes: https://crackstation.net/hashing-security.htm
[ Parent | on HN ]
Re:Crowdsec: A Fail2Ban alternative written in Go by Philippe_H on Monday October 19, 2020 @02:33PM (#24829377)
(but I think they already send it through HTTPS)
[ Parent | on HN ]