_dhar’s avatar_dhar’s Twitter Archive—№ 4,412

  1. RT @janl: sha1 without salt is equivalent to plain text. sha1 *with* salt as well. Use pbkdf2. Upgrade old hashes on login. https://t.co…