Viewing profile — heliosyne

I didn't complain about anyone. The Okta vulnerability isn't because of public salts.

No, rainbow tables are hash-input specific. They're user-specific only if the salt is user-unique. Usernames aren't normally part of the hash input because they're assumed-public k…

Because bcrypt is still viable. Its cost factor is easily scaled to commodity performance, keeping the attack cost high. The main attack vector these days is GPU-based compute. The…

The security of salting is twofold. Yes, it defeats the common rainbow table. But if the salt is known, a rainbow table for that salt can be computed. The security of salting depen…

Desktop and phone: Firefox + uBlock. Router is OPNsense with its own validating recursor, domain blacklist, and routing blackhole. Phone runs a private VPN to my router when not on…