November 2017
Intermediate to advanced
542 pages
14h 24m
English
Go ahead and start the application. Try creating a new user with user1 as the password. Log out of the application, then use the instructions on the Welcome page to open the H2 console and view all of the users' passwords. Did you notice that the hashed values for the newly created user and user1@example.com are the same value? The fact that we have now figured out another user's password is a little disturbing. We will solve this with a technique known as salting.
Would you like some salt with that password? If the security auditor were to examine the encoded passwords in the database, he'd find something that would still make him concerned about the website's ...
Read now
Unlock full access