This wednesday the next Web Application Security Meetup takes place in our Hackquarter. This time with a talk about password hashing functions held by Daniel Bilanovic, member of the ccc-ffm.
During the latest data breach at Yahoo major news papers and sites distributed excerpts from Yahoos statement „The stolen user account information may have included […], hashed passwords (the vast majority with bcrypt) […].“ without further explanation, what „bcrypt“ is all about. Daniel gives an overview why to use specific hash functions for password storage and what they try to prevent.
Meetup & Talk will be held in English.