mckiddy

Legacy code?

However, either case is an equally valid reason to uninstall the app.

His entire job was teaching students, so I don't give a rat's ass about what the rest of the faculty thinks if the students like him and perform well.

The second dotcom boom is coming to an end. Have fun everyone

In that case they should just leave out the examples entirely. If the code runs, someone in the world WILL copy & paste it into their project and walk away, no matter if it's marked as insecure or not, which just perpetuates the problems that the post is trying to deal with.

Also I'm not sure "password hashing" is any more descriptive than "password encryption."

Silicon Valley egos at their finest: "Use our product so we can make billions of dollars, but fuck you otherwise." I use venmo with friends because of their network effect and it's convenient, but it sounds like internally they're a pretty shitty company to deal with.

Plaintext actually stands out pretty easily in a hex editor, just because everything else is basically gibberish.

The missile argument is a bit of a stretch to me. The F-35 can carry way more than four missiles if they're attached to the wings (like the Su-35 the author compares it to), it will just destroy any semblance of stealth.

Comparison with the F-22 (http://www.aerospaceweb.org/question/planes/q0105.shtml).

Except this also adds very little benefit. Sure, 3 ciphers might be better than one, but as the top comment said the cipher is already the strongest part of the entire process.

Exactly, this will fail just as fast as a single cipher when your users inevitably use 'password123' for their password.

On modern bows it's called the riser. I'm not sure if that has always been the case though.

scrypt deliberately uses lots of memory in addition to CPU, which makes it much harder to parallelize using a GPU

scrypt is deliberately designed to use a large amount of memory when calculating hashes, which makes it much more difficult to parallelize using a GPU (which don't have much RAM available), hence making it much much slower to attack.

If you know the HMAC key, why would you ever need to generate a collision? You can just reevaluate the MAC and replace the old one.

MUNI in San Francisco is also like this. Very useful.

Thats true, but I just wanted to point out that humans are actually one of the best species on Earth at distance running

http://www.slate.com/articles/sports/sports_nut/2012/06/long...

How does this provide any better performance to the company using it? If anything it's doubling the work requirement because now you have to do 2 rounds of bcrypt/etc instead of 1.

Because so many of these points are demeaning, right? Practically everyone I've ever met uses "you guys" in place of "you all", etc, with no derogatory intent. Certainly anyone familiar with the western US would realize and understand this. My mom and dad are both technically illiterate, and I gladly use both as examples. I would never assume a woman is non-technical _at a technical conference_, but everywhere else in the country the average woman is far less likely to be in a technical career than the average man, by simple probability. IT IS UNUSUAL.

Are you serious? Opinions like these are exactly why women are having a hard time in tech in the first place. If I have to spend every waking moment at work obsessing about whether a single comment will make my female coworkers label me as a sexist asshole, then you bet I'll avoid working with them as much as possible.

The evidence also wouldn't be available if he simply hadn't recorded the videos in the first place.