Member-only story
Symmetric Key Encryption With PBKDF2 (and Node.js)
A recent paper from researchers at the University of Bonn found that many developers struggled with the concept of properly protecting a password [here]:
The research involved asking 260 Java developers from Freelance.com to write code which will safely store passwords. In the end, 43 of them took up the work. The given task was to setup a user registration system for a fake social media site. Of the resultant split, 39 were male, and one female, and the others did not define their gender. 37 had university degrees and had an average experience of 6.4 years of Java coding:
In order to assess whether being paid more for the task resulted in improved security, around half of the group were paid €100 and the rest received €200. Then they split each of these groups into whether they were prompted to use a given methods or not:
- Use defined password storage method (P100) and paid €100.
- Use defined password storage method (P200) and paid €200.
