News for hackers. Stuff that matters.

A comment on Can you trust Paul Graham with your password?.

Re:Can you trust Paul Graham with your password? by falsestprophet on Wednesday May 06, 2009 @01:35AM (#595285)
Security on Hacker News is good enough. But, it would be kind of nice to have salted hashes and an absurdly expensive hashing algorithm. We are meant to be hackers after all.

A standard, or even a rationally conservative, approach seems more fit for Innocuous News.

[ Parent | on HN ]
Re:Can you trust Paul Graham with your password? by TheAmazingIdiot on Wednesday May 06, 2009 @02:31AM (#595328)
Oh come on now. We're hackers. That means some SHA1 with a little bit of salt does nothing for "Real Security".

"Real Security" would require personal acquaintance with an operator or someone they have trusted. To go down that trust chain, they would sign your GPG key. After that, posting by signing would be only done. And as per due course, you would be expected to have a HN_only GPG key for 'security reasons'.

But security for securitys sake is just wasting resources when it's just a news site, unless you're a crypto-fiend.

[ Parent | on HN ]
Re:Can you trust Paul Graham with your password? by eru on Wednesday May 06, 2009 @06:15AM (#595510)
I'd prefer Off-The-Record encryption over GPG. I want plausible deniability.
[ Parent | on HN ]