all 11 comments

sorted by: hot top controversial new old
[–] 26 points 1 week ago (2 children)

That is a deep cut. Also: you need to pepper it too.

  • source
  • hideshow 2 child comments
  • [–] 5 points 1 week ago (1 child)

    Salt: something static across the whole app

    Pepper: something dynamic for each user

  • source
  • parent
  • hideshow 1 child comment
  • Other way around. Salt is different for each user, and generally stored along with each user's password hash. Pepper is the same for all users, and therefore can be stored separately from the user/PW database (and hopefully more securely), making the user/PW database useless to anyone who doesn't also get access to the pepper value. See the explainer that schipelblorp@sh.itjust.works linked: https://www.baeldung.com/cs/password-salt-pepper

  • source
  • parent
  • [–] 22 points 1 week ago
    [–] 14 points 1 week ago

    Boomers be like "back in my day everyone had md5 which was better" while scarfing down their ycrypt

  • source
  • [–] 11 points 1 week ago (1 child)
  • [–] 4 points 1 week ago

    paaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaasword

  • source
  • parent
  • Is this a reference to the ssh vulnerability

  • source
  • [–] 2 points 1 week ago (2 children)

    i loveee the vibe of a depressing diner, i could visit one without going to a fascist led country

  • source
  • hideshow 2 child comments