Securing passwords with Blowfish
During the past week, I had an idea on how to easily red flag potential employers: ask to see one row of their user table, and look at the password field. If the password is in plaintext, then run for the door.
When companies such as Blizzard are suffering from authentication system hacks, and appear to be vulnerable to dictionary-style attacks, then there exists a problem that is endemic across the industry.
As IT professionals, I would expect that many of us have come across registration and log-in systems that make Swiss cheese look impenetrable by comparison. The sad reality is that this is easily fixable.
