Picking an Auth Library |
[eluser]theshiftexchange[/eluser]
The idea is that when the hacker reverses the MD5 with salt, he has some text, but doesnt know which part is the password, and which part is the salt. Yes - he could 'socially' engineer and look at the text to determine if it's obviously - such as "mypassword23235" - but if you have a strong password (f32tjt32) - its harder. And the idea behind salt is to stop a brute force stealing of ALL user passwords. Its not foolproof, and thats why MD5+salt is falling out of fashion compared to other encryption options. This obviously fails if he has the salt and the source code - but security is not a single key - its about layers and layers of protection. Salt is just another layer. This may help: http://en.wikipedia.org/wiki/Salt_(cryptography) |
Messages In This Thread |
Picking an Auth Library - by El Forum - 05-15-2009, 12:54 AM
Picking an Auth Library - by El Forum - 05-15-2009, 01:56 AM
Picking an Auth Library - by El Forum - 05-15-2009, 03:59 AM
Picking an Auth Library - by El Forum - 05-15-2009, 04:04 AM
Picking an Auth Library - by El Forum - 05-15-2009, 06:48 AM
Picking an Auth Library - by El Forum - 05-15-2009, 06:55 AM
Picking an Auth Library - by El Forum - 05-15-2009, 07:13 AM
Picking an Auth Library - by El Forum - 05-15-2009, 07:35 AM
Picking an Auth Library - by El Forum - 05-15-2009, 07:45 AM
Picking an Auth Library - by El Forum - 05-15-2009, 11:00 PM
Picking an Auth Library - by El Forum - 05-16-2009, 01:54 AM
Picking an Auth Library - by El Forum - 05-16-2009, 05:49 AM
Picking an Auth Library - by El Forum - 05-16-2009, 05:53 AM
Picking an Auth Library - by El Forum - 05-16-2009, 06:00 AM
Picking an Auth Library - by El Forum - 05-16-2009, 06:05 AM
Picking an Auth Library - by El Forum - 05-16-2009, 06:19 AM
Picking an Auth Library - by El Forum - 05-16-2009, 06:28 AM
Picking an Auth Library - by El Forum - 05-16-2009, 06:33 AM
Picking an Auth Library - by El Forum - 05-16-2009, 06:40 AM
Picking an Auth Library - by El Forum - 05-16-2009, 06:48 AM
Picking an Auth Library - by El Forum - 05-16-2009, 07:06 AM
Picking an Auth Library - by El Forum - 05-16-2009, 07:12 AM
Picking an Auth Library - by El Forum - 05-16-2009, 07:19 AM
Picking an Auth Library - by El Forum - 05-16-2009, 07:22 AM
Picking an Auth Library - by El Forum - 05-16-2009, 07:26 AM
Picking an Auth Library - by El Forum - 05-16-2009, 07:31 AM
Picking an Auth Library - by El Forum - 05-16-2009, 07:46 AM
Picking an Auth Library - by El Forum - 05-16-2009, 07:55 AM
Picking an Auth Library - by El Forum - 05-16-2009, 09:24 AM
Picking an Auth Library - by El Forum - 05-16-2009, 09:48 AM
Picking an Auth Library - by El Forum - 05-16-2009, 10:10 AM
Picking an Auth Library - by El Forum - 05-16-2009, 10:38 AM
Picking an Auth Library - by El Forum - 05-16-2009, 10:45 AM
Picking an Auth Library - by El Forum - 05-16-2009, 10:58 AM
Picking an Auth Library - by El Forum - 05-16-2009, 11:05 AM
Picking an Auth Library - by El Forum - 05-16-2009, 05:47 PM
Picking an Auth Library - by El Forum - 05-16-2009, 09:24 PM
Picking an Auth Library - by El Forum - 05-17-2009, 01:13 AM
Picking an Auth Library - by El Forum - 05-17-2009, 01:26 AM
Picking an Auth Library - by El Forum - 05-17-2009, 01:30 AM
Picking an Auth Library - by El Forum - 05-17-2009, 01:39 AM
Picking an Auth Library - by El Forum - 05-17-2009, 01:52 AM
Picking an Auth Library - by El Forum - 05-17-2009, 01:58 AM
|