Hacker News new | ask | show | jobs
by ericcartman 4589 days ago
http://cl.ly/image/0x331G1c2a2f
2 comments

On the bright side, he/she's using bcrypt.
No salt.. It's sad that we now have to salute something like that after the Adpbe breach. Decent hashing and salting should be something standard, normal, not worthy of praise.
Bcrypt eliminates the need for multiple columns and is very secure so this person is doing it right. Actually I get a little bit ancy when people still aren't using Bcrypt.
the bcrypt format is $2a$<rounds>$<salt><hash>

the salt is 22 chars, the hash 31 chars.

Is he running it in debug mode?