Please, don't use equality operator when comparing password hashes | Nowhere Reference - Random thoughts in the wild.

2021/07/01 17 users Please title Don't use it will

Please, don't use equality operator when comparing password hashes As you saw in the title, you shouldn’t be using the equality operator to compare password hashes, and you may ask why? The answer to that question is that it will open your application to timing attacks because of how the equality... 続きを読む

Stop using ridiculously low DNS TTLs | Frank DENIS random thoughts.

2019/11/03 19 users Stop using

DNS latency is a key component to having a good online experience. And in order to minimize DNS latency, carefully picking DNS servers and anonymization relays play an important role. But the best way to minimize latency is to avoid sending useless queries to start with. Which is why DNS was desi... 続きを読む