Nathan's profileNates StuffPhotosBlogListsMore ![]() | Help |
|
March 28 Utah Spring Code Camp
--nz CODE CAMP OFFICIAL ANNOUNCEMENT: The local .NET Users Group and SQL Server Users Group is conducting a “Code Camp” for local software programmers next month at Neumont University. The code camp is by the community for the community. Always free and Always for the community. We will have Sessions on .NET, SQL Server, and Oracle. Presented by experts around the valley! March 15 Better Password SecurityToday while speaking with a colleague we were discussing a user for a website who had lost their password. A trick I have done many times in the past was to copy the password hash from a user that I knew what the password was over the top of the user’s password that we didn’t know. Then we simply log into that user with our password and change it. That’s fairly unsecure! So it hit me…a great idea! Use the username as a salt for the password hash!
If you use the username for the salt then copying the password hash from one user to another will not work! I don’t know if I am the first one to think of that or if someone has done that before but at least if I was the first one then maybe I can get credit for it and get to name it “ZauggHash Encoding” Nathan Zaugg |
|
|