@PasswordStorage

How securely do they store user passwords & how good are they at letting us know? And how do *you* store passwords? A project by Michal Špaček @spazef0rze

 In your questions, asking
pulse.michalspacek.cz/passwords/storages
Joined February 2018
  • Tweets169
  • Following1
  • Followers438
9Media
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
Replying to @roman3349
Potvrzuju. To už není ani vtipný :-(
23
"We don't have a password complexity policy. Passwords are encrypted with salt and SHA-256." -- @Jotform You don't encrypt passwords for authentication, you hash them. Luckily, SHA-256 is a hashing algorithm 👍 but it's not suitable for passwords 👎 pulse.michalspacek.cz/passwo…

www.jotform.com password storage disclosures

5-null (disclosed January 2024)

pulse.michalspacek.cz
2
3
1,217
The folks behind Slab, the knowledge base & wiki app, created a nice page where they share many security-related things including that they store passwords hashed with bcrypt: slab.com/security/#encryptio… Thumbs up for the transparency @slab & for bcrypt too! pulse.michalspacek.cz/passwo…

Security - Slab

Discover why our easy creation, organization, and numerous integrations, make us so popular with non-technical and tech-savvy teams alike.

slab.com
1
5
1,786
"deSEC is a free DNS hosting service, designed with security in mind" (their words) and they use "PBKDF2-based password hashing to secure your sensitive information" (also their words). Nice job @desec_io! (my words this time) 😊 pulse.michalspacek.cz/passwo…

desec.io password storage disclosures

9-null (disclosed March 2023)

pulse.michalspacek.cz
1
2
913
Load more