News for hackers. Stuff that matters.

A comment on Bob's wife Carla lends a speedy mind. Parent comment

Re:Bob's wife Carla lends a speedy mind by venomsnake on Tuesday April 16, 2013 @09:15AM (#5557830)
What worries me is that most competent people in the industry still ask whether passwords were salted and hashed, rather than whether they used a key derivation function.

Maybe because even that weak protection is still rare. It is the equivalent of "Did you plug it" in tech support.

[ Parent | on HN ]
Re:Bob's wife Carla lends a speedy mind by rlpb on Tuesday April 16, 2013 @09:22AM (#5557865)
Sure. I'm certain that there are competent developers who are aware of KDFs but still ask for salting for the reason you described.

The problem I perceive is that other developers learn from this question. They falsely learn that salting is the best practice answer, when it is not.

[ Parent | on HN ]