News for hackers. Stuff that matters.
Re:An HN style social news site written in Ruby/Sinatra/Redi... by antirez on Thursday October 20, 2011 @07:31PM (#3137621)
daeken thanks for your knowledge. We should follow your example of understanding how things works instead of repeating "use bcrypt".
Re:An HN style social news site written in Ruby/Sinatra/Redi... by tptacek on Friday October 21, 2011 @12:58AM (#3138495)
I agree, but we could do worse than to have "bcrypt" be the lay developer's default answer. All that is is annoying, whereas "secret salt construction using Whirlpool as the hash" or- whatever- craziness is actually dangerous.

Your code is neat. I don't care what hash you use. I'm just saying.

Re:An HN style social news site written in Ruby/Sinatra/Redi... by michaelfairley on Thursday October 20, 2011 @08:33PM (#3137774)
If iterated SHA1 and bcrypt are (all other things equal) equally secure, but you're more likely to mess up while implementing your own iterated SHA1, then bcrypt is more secure.
Re:An HN style social news site written in Ruby/Sinatra/Redi... by bhousel on Friday October 21, 2011 @05:52PM (#3141882)
Use bcrypt, if for no other reason than that your code is likely to be forked by people who don't want to understand how things work.