Received: by 10.224.220.12 with SMTP id hw12mr4398038qab.8.1347448164610;
        Wed, 12 Sep 2012 04:09:24 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.52.72.16 with SMTP id z16mr3598847vdu.15.1347448164588; Wed,
 12 Sep 2012 04:09:24 -0700 (PDT)
Path: da15ni3445qab.0!nntp.google.com!v8no2092772qap.0!postnews.google.com!s8g2000vbc.googlegroups.com!not-for-mail
Newsgroups: comp.os.vms
Date: Wed, 12 Sep 2012 04:09:24 -0700 (PDT)
Complaints-To: groups-abuse@google.com
Injection-Info: s8g2000vbc.googlegroups.com; posting-host=193.66.94.11; posting-account=UlnzrQoAAABZD7r5wyNJvC4Zlw8yCPsR
NNTP-Posting-Host: 193.66.94.11
References: <07d1eafa-aff7-4469-915e-902e90507f1b@s2g2000vbj.googlegroups.com> <k2nq3m$prg$1@dont-email.me>
User-Agent: G2/1.0
X-HTTP-UserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4)
 AppleWebKit/534.56.5 (KHTML, like Gecko) Version/5.1.6 Safari/534.56.5,gzip(gfe)
Message-ID: <fc02598b-483d-4c92-9aeb-769c5dc20a89@s8g2000vbc.googlegroups.com>
Subject: Re: Newbie DEC COBOL Question - Indexed files...
From: sampsa <samp...@gmail.com>
Injection-Date: Wed, 12 Sep 2012 11:09:24 +0000
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

On Sep 11, 7:49=A0pm, Stephen Hoffman <seaoh...@hoffmanlabs.invalid>
wrote:
> On 2012-09-11 14:07:54 +0000, sampsa said:
>
> > =A0 =A002 =A0 =A0 =A0Password =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0PIC X(30).
>
> And FWIW, that's potentially a bug, too.
>
> In general, don't store a password. =A0Store a hash where you can; bcrypt
> or scrypt for that, and do not use a SHA nor any other fast hash. =A0Or
> store a certificate; a private or public key, as appropriate. =A0Use the
>

I'm aware of these issues :)

Once I have the basic system working I will be storing a salted hash
of the password.

Sampsa