Question about password hashing. It's best practice to create a different salt for every user and store both the salt and the hashed password in the DB record?
someone even suggested to use a site-wide secret to add to the individual salt so that should the database be compromised, they still aren't any closer to knowing the passwords of everyone without that secret
Further to my previous question about salted passwords in PHP/MySQL, I have another question regarding salts.
When someone says "use a random salt" to pre/append to a password, does this mean:
Creating a static a 1 time randomly generated string of characters, or
Creating a string of characte...
and if there is one thing I learned in software engineering, it is that you dont try to understand how cryptography and security works and be thankful for the people that made the system you use
I'm getting this error in a WPF app. Project-level conditional compilation constant 'DEBUG ^^ ^^ TRACE' is not valid: Character is not valid. I recently switched to a new computer have been getting it ever since I pulled it down from the TF server
It says that the file it's happening in is "vbc", which doesn't exist. Apparently that's a Visual Basic thing, which I'm not even using.
Hello. The first link in stackoverflow.com/tags/ssrs-2008-r2/info is redirecting from SQL Server 2008 Reporting Services to the webpage of SQL Server 2017. Is there any better link for the 2008 edition?
@Neil You said hash(hash(salt + secret) + password) above. I'm using Rfc2898DeriveBytes() which requires a salt and the thing you're hashing. Would that be Rfc(Rfc(secret + salt, salt) + password, salt)?
First question:
The position of the salt has no impact on the security of a particular hash. A good hash function has perfect entropy, in that for every input bit that changes, each output bit has a 50% chance of changing.
Any possible security benefit from a certain order would be entirely fro...
What is the reason you're going for PBKDF2? For our company, it was because it doesn't require third party code, which I guess isn't the case with you.
I think I worked the bugs out of that code. I never really worked that much with base 64 strings, at least not recently. But I got them figured out. Just needed to do all of the manipulations as byte arrays.
@Wietlol how every consuming class would have its unique dependency (if every class should pass different arguments to the dependency's constructor ) via a global injector?
Hey, I'm looking at some code I wrote a year+ ago, using Xamarin/C#. I just got a notification from Google that I have to build the Android version of the app to support 64-bit architecture, and I found an SO post (stackoverflow.com/questions/54537469/…) that describes how to do that.
However, I can't seem to find the Project settings menu... any idea where that might be located?
I know this is a dumb question, but VS is huge and I've looked everywhere I can think to look for it, and haven't been able to locate it.
Honestly, no idea, but they both do at least imply that they're using VS
(OP and answerer, that is)
Maybe I'll ask over on the Xamarin forums, as they're likely to have a whole bunch of folks who have received a similar email to the one I got. Thanks for your time!
My head is crammed with ideas just jostling to see the light of day. I imagine them pounding the inside of my cranium screaming LET US OUT!. And in response, I say the same thing I always say. Not yet. It’s counter productive.