security

Picking a great password

I was trying to find a simple, brief guide to picking great passwords, and came up short. Hopefully this simple advice is useful: 1. Don't pick a password; pick a pass phrase. 2. Include letters of both cases, numbers, and punctuation characters. For bonus points, use "special&

Software development

More secure password hashing in PHP 5.5

The most recent set of PHP releases suggest that the core development team are serious about keeping PHP at the forefront of web development technology, and addressing some of its legacy criticisms. I've previously talked about the JsonSerializable interface; now, PHP 5.5 is introducing an easier way