🛡️ Secure Password Storage: Beyond Just Hashing
"We hash passwords" isn't actually a complete answer. Which algorithm, how it's salted, and how comparisons happen all matter just as much as the fact that hashing happens at all.
Practical write-ups on the vulnerabilities we see most often, written for developers rather than auditors.