Re:LivingSocial Hacked – 50 Million Customers Affected
by pindi on Friday April 26, 2013 @07:59PM
(#5616197)
A similar method is a "pepper", a form of salt common to all users and stored in the application configuration, allowing the passwords to resist attack even if the hash and user-specific salt are lost. The reason it's not often used is that the assumption is that if your database is compromised, any other commonly-used secret keys on the server will be too. It can be useful for defense in depth, though.
[ Parent
| on HN ]