Posts Tagged ‘ Revision 113 ’
Based on a suggestion by Ryan Govostes, I have implemented salted passwords. If the database is compromised by some sort of attack — SQL injection, or otherwise — the attacker will be unable to use a pre-made collision table. Now, there is an application salt in addition to a per-user salt. The idea behind the application-wide [ READ MORE ]