1 year ago

I'm not a security expert, but as a software engineer I feel like it's part of my job to do everything in my power to protect our customer's data. So I make it part of my job to at least avoid what could be a common mistake if I didn't understand the fundamental of these terms.

It has very little to do with data security, but it might give a bad sense of security for beginners in the field.

When validating a salted hash, the algorithm is fed with what the user typed and the stored hash.

For instance, if your company uses AWS and store people's password, it's part of your responsibility to keep those password secure.