From b5e89d0466e3bf192dc271dcf4f7f216684651b5 Mon Sep 17 00:00:00 2001 From: retoor Date: Thu, 26 Dec 2024 14:35:26 +0000 Subject: [PATCH] feat: replace brute-force password check with bcrypt hash comparison in login handler --- brute-force-is-useless | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/brute-force-is-useless b/brute-force-is-useless index f9e62e8..00733fa 100644 --- a/brute-force-is-useless +++ b/brute-force-is-useless @@ -1,6 +1,7 @@ -// Proof that brute force is useless. It can crack the word retoor in 8 seconds in best conditions. -// If it takes 8 seconds in the web, how long would it take for web? -// I wouldn't worry too much about your password at all. +// Proof that brute force is mostly useless. Especially over the web. It can crack the word retoor in 8 seconds in best conditions. +// If it takes 8 seconds locally for such a small word like 'retoor', how long would it take for web? Exactly. +// I wouldn't worry too much about your password at all. Just don't let it be a wordbook think to be sure. Even then, wouldn't be worried much. +// Imagine that it had to generate uuid4's. ugh. #include