News for hackers. Stuff that matters.

A comment on Slack was hacked. Parent comment

Re:Slack was hacked by MarkyC4 on Friday March 27, 2015 @02:18PM (#9278105)
The fact that the pepper can't be changed/rotated far outweighs any upsides
[ Parent | on HN ]
Re:Slack was hacked by cpeterso on Friday March 27, 2015 @02:57PM (#9278349)
You can change your pepper by double-peppering your existing password database:

  scrypt(scrypt(scrypt(scrypt(password, salt), pepper2013), pepper2014), pepper2015)
https://blog.filippo.io/salt-and-pepper/
[ Parent | on HN ]
Re:Slack was hacked by flurdy on Friday March 27, 2015 @07:00PM (#9279612)
Sounds like a maintenance nightmare. Need to ensure you keep your tongue straight when partitioning or restoring databases, migrating/splitting to new apps etc.
[ Parent | on HN ]