Security, turning your passwords into sausage mash!
Monday, May 16th, 2011Some people may be aware of the ongoing struggle Sony have have recently with the hacking of their Gamer Network and millions of their user details being stolen. To be honest, security is always a matter of time and money. So breaking into their network was clearly worth the money and I assume it wasn’t quick or simple to do!
However, what’s interesting about this story is how the company were thought to be storing their detail in clear text like below.
Storing details in plain text means that anyone who’s able to view the database has easy and plain access to the password. People like the staff, developers, marketing managers, database administrators and even hackers. Imagine how many times you use the same password for lots of different online accounts. That’s a pretty important piece of data for a company to not cover up.
So I felt compelled to write about the Thought Den method we use to store our users’ passwords in any bespoke modules of our online software.
Hashing of passwords
None of your passwords are ever kept in plain text. We immediately use a “one-way hashing algorithm” and a hidden keyword to hide your passwords when they’re saved. Or in English, we put it through a sausage masher and then save the result. Then anyone who views the data will never see your passwords in plain simple text, just a mashed view.
Nice right! And the beauty is, it can only go one way, so there’s no de-cyphering it backwards.
Next post. SQL injection attack… or in plain English, keeping your borders well checked against trojan horses.












