Comment Re:And GMail gets a pass? (Score 2) 94
because it's been happening since the beginning, so instead of an outcry, people just don't use the service
(also you may have noticed that a lot of people complain about it all the time)
Comment Re:Should be easy to prove innocence (Score 1) 315
If there's no license, then by default all rights belong to the owner only i.e. you have no license to do anything with it (except as allowed by fair use, which doesn't include making a derivative work and then selling it)
Are You Sure SHA-1+Salt Is Enough For Passwords? 409
Melchett writes "It's all too common that Web (and other) applications use MD5, SHA1, or SHA-256 to hash user passwords, and more enlightened developers even salt the password. And over the years I've seen heated discussions on just how salt values should be generated and on how long they should be.
Unfortunately in most cases people overlook the fact that MD and SHA hash families are designed for computational speed, and the quality of your salt values doesn't really matter when an attacker has gained full control, as happened with rootkit.com. When an attacker has root access, they will get your passwords, salt, and the code that you use to verify the passwords."
Comment Re:Each user gets 18 quintillion addresses? (Score 1) 214
A /48 is larger than a /64 (just like a /8 is larger than a /24 in IPv4).
