Building Browsergames - Latest Comments in Why you should be hashing sensitive data

Re: Why you should be hashing sensitive data

Tom McAtee — Sat, 10 Nov 2012 05:33:04 -0000

I know you mean well but it's irresponsible to mention hashing without going into salting and chaining; anything hashed with a single iteration of a hashing algorithm will last (less than) seconds against a rainbow table.

Re: Why you should be hashing sensitive data

Benjamin Vangeel — Fri, 22 Jul 2011 16:20:06 -0000

Got that. Thanks!

Re: Why you should be hashing sensitive data

Luke Bullard — Wed, 20 Jul 2011 16:08:37 -0000

You only hash the stuff that you don't want to show in the future, but want to compare with user input. Passwords are pretty much the only thing, so no.
Do not hash everything else.

Re: Why you should be hashing sensitive data

benjamin_vangeel — Wed, 29 Jun 2011 14:22:07 -0000

So I need to add the hashing command after everything else in my register.php file?

Re: Why you should be hashing sensitive data

Luke — Wed, 25 Nov 2009 10:30:45 -0000

E-mails are definitely considered sensitive(although you can't hash them
because you need them to e-mail users).

I shouldn't say that there's no way to unhash data, but there's no way that
you'd want to - if you want to be able to recover the information, you
should look at encrypting it instead(so that you can decrypt it when you
need it).

Re: Why you should be hashing sensitive data

Marius — Wed, 25 Nov 2009 09:37:35 -0000

Is emails considered sensitive in this matter? And is there no way to unhash data that is hashed?