Miha Valencic » web

Oh really? Password too long?

miha — Wed, 23 Feb 2011 07:28:48 +0000

We are in 2011 after all, so seeing an error message that a password is too long is… well embarasing.

So, given that passwords shouldn’t or should I say must not be saved in a way that enables anyone (even administrators) to retrieve the plaintext version of a password, we’re talking about some sort of hashing. Whether hashing algorithm it is MD5 (avoid) os SHA1 (and in order to avoid precomputed hashes of passwords (known also as rainbow tables) you should use salting techniques with hashing algorithms), the length of a calculated hash does not depend on the length of the plain text password.

So, why is the length of the password limited to 16 characters? Beats me.

Of course, I recommend developers to use bcrypt instead of SHA or MD5. Bcrypt is very slow (compared to SHA or MD5), which is a good property to have for checking passwords — you don’t want to have a super-fast hashing/crypting algorithm thus effectively preventing brute force attacks.

Kdaj je bolha.com postala plačljiva?

miha — Wed, 13 Jan 2010 17:01:22 +0000

Presenečen sem danes ugotovil, da je na bolha.com le nekaj rubrik brezplačnih. Za precej rubrik pa zahtevajo plačilo. Prodajam (po zelo ugodni ceni!) PVC okna in vrata, ki sem jih odstranil ob adaptaciji hiše… Očitno bom dal pač oglas na Pod svojo streho. Sicer, če koga zanima, ali pozna koga ki bi to rabil, gre za kvaliteten PVC profil (jaz drugod po hiši še vedno imam ostala okna) in termopan (k=1.1) stekla. Dimenzije: balkonska vrata (višina: 224cm, širina 100cm) in dve okni (višina: 140cm, širina 210cm).

After YSlow, now Page Speed from Google

miha — Fri, 05 Jun 2009 21:36:36 +0000

Page Speed is an YSlow alternative for testing and optimizing websites. I tested it only briefly on Firefox 3.5b4 (officialy, it does not support beta Firefox releases, but you can always unpack the XPI and change the maxversion attribute.

Both YSlow and Page Speed require the excellent Firebug extension, which is an essential tool for web developers. If you don’t know YSlow or Page Speed yet, now is the time to get acquainted.