ErikD's comments

ErikD | 13 years ago | on: A Better Way to Store Password Hashes?

Does it really matter that the hacker doesn't know which hash belongs to the user? He will still be able to do a dictionary attack using the same method you use to login.

Wouldn't this just make dictionary attacks easier? Now the hacker doesn't have to find one exact password but has the option to match any of his dictionary passwords to any of the password hashes.

I know that there are hardly any collisions and that in practise this wouldn't really change a thing. But in theory the dictionary attack would be faster this way.

ErikD | 14 years ago | on: I Don't Need Backups, I Use Raid1

Using mk-slave-delay you can do this with Mysql as well. We always have a slave running behind a day. You can fast forward the slave using the 'START SLAVE UNTIL' command.

ErikD | 14 years ago | on: Why I hate search

He means using the auto-complete in your address bar, not actually searching with it.

ErikD | 14 years ago | on: Page Speed Service

People should realize that by using this service, all sensitive data posted to your website will be readable by google.

ErikD | 14 years ago | on: Pure CSS GUI icons (experimental)

That's very much possible using images:

  .someIcon {
  padding: 0 0 0 20px;
  background: url(someIcon.png) left center no-repeat;
  }
page 1