Collaborate Disseminate
I´m unsure if I correctly understood the way peppers and salts increase the amount of storage you need for a dictionary attack.
If I were to create a dictionary with 100.000 entries that only stores the hashed password and the salt with th… Continue reading How big would the size of a dictionary be? [closed]
Hydroponic systems are an increasingly popular way to grow plants indoors using a minimum of resources. Even some commercial farming operations are coming online using hydroponic growing techniques, as these …read more Continue reading A Single-Watt Hydroponic Lighting System
I am currently learning about cybersecurity and trying to implement it in my next web application.
I have been reading some articles about hashing, specifically SHA2 and Blowfish.
In this article, it is recommended to add a hard-coded salt… Continue reading Is it a good practice to add hard-coded salt to BCrypt passwords?
I must protect a field being passed to a client through a public network, then passed back to the same cluster. The client is not decrypting it; the client will pass it back as-is to the server, which will decrypt it to extract the origina… Continue reading Does adding salt increase security when encrypting with pepper?
Earlier this week it was widely reported that Softbank’s friendly-faced almost-humanoid Pepper robot was not long for this world, as the Japanese company’s subsidiary in France that had been responsible …read more Continue reading Did You Meet Pepper?
And at what rate should I assume an attacker can guess passwords on these services generally? eg. 1/s or 10/s or 1000/s?
Continue reading Which services are using pepper + HSM to secure passwords? [closed]
I have read here and here, that instead of using pepper, it is better to encrypt hashed/salted passwords before storing in the database. Especially with Java, as there’s no library for salt/pepper, but just for salt hashing, and I’m not go… Continue reading Encrypting salted password hash before storing in the database
As far as I understand, a problem with the idea of a pepper is that, if it’s stored as part of your code, then the hacker can read it if they can access your code.
So I was wondering, would it not be better to store the pepper in memory? I… Continue reading In-memory pepper
Grand venues of spectacle to entertain audiences has long been a part of history, but such tradition is highly problematic at the moment in the light of the pandemic. Some sports leagues are testing the waters with a soft restart by playing only to a broadcast audience, leaving the stadium …read more
Continue reading SoftBank Robots Pinch Hit For Baseball Cheerleaders
In this question on this board the author of the selected answer states the following.
If you, as an attacker, manage to extract hashes and salts from a database, you probably either find a way to extract the password hashing algorithm… Continue reading Using a Pepper as the index to insert a salt