Join me on my quest to seek out and destroy weak passwords and weak password storage everywhere!
With PBKDF2/RFC2898/PKCS#5v2, BCrypt, and Scrypt, sufficiently long cryptographically random per-user salts, and iterations in the tens of thousands or sufficiently high work factors we will defeat the lesser foe, weak password storage!
With education, sufficiently large keyspaces, nigh-unlimited maximum lengths, sufficiently long minimum lengths, and rules-based dictionary lookup exclusions, in time we will defeat the even more fearsome enemy of the weak password itself!
Q&A for information security professionals
Q&A for professional and enthusiast programmers
Q&A for database professionals who wish to improve their database skills and learn from others in the community
Q&A for system and network administrators
Q&A for computer enthusiasts and power users
Q&A for software developers, mathematicians and others interested in cryptography
Q&A for peer programmer code reviews
Q&A for engineers, producers, editors, and enthusiasts spanning the fields of video, and media creation
Q&A for gamemasters and players of tabletop, paper-and-pencil role-playing games
Q&A for users of Linux, FreeBSD and other Un*x-like operating systems.
Q&A for researchers, developers, and users of Tor