Hacker News Reader

Name one. You don't count.

Here's where I read about it:

Edit: Even if it were just me, it doesn't make the argument invalid.

Your arguments so far are

1) it's unlikely to be the weakest link. Textbook case of Murphy's law,

2) nobody does it, and

3) I've never recommended it, therefore it's useless.

I don't understand how you can resort to that... Seriously, I'm at loss here. Are you waiting for a high profile attack to react?

I know you have a reputation to defend, but I think you screwed it somehow in this case.

At least, it proves you're not a machine :-)

I am having trouble coming up with the attack that dumps the password token table but doesn't give up the whole app. Sorry.

Using BCrypt for them provides a layer of protection against brute force attacks, no?

So do I, but it doesn't mean it couldn't happen.

ONE WAY HASH ALL THE THINGS!

:)

YAY! :-)