I skimmed through How Companies Can Beef Up Password Security and I thought that several assertions were completely wrong, in particular:


Cryptographic hash (like md5) with salt are bad.
It isn't uncommon to break/crack unix shadow files.
To make a password hash I should run it over md5 or whatever hundreds or thousands of times.


The article suggests that salted hashes are too easy to break and you'd want to select a password hash because its computationally longer to check passwords so you can not do as many per second.

I think doing 3 is bad for security and 1 is in reality the best option. What do you guys think?


Question: JavaScript: Call base function from prototyped inheritance
Answer: var super_class = function(p) {
    this.p = p + 1;
    this.method = function(a, b) {
        // some code
    };
};

var base_class = function(o) {
    this.o = o;
    super_class(o); // remove "this"
    this.method = function(a, b) {
         // call base.method();
         // some code
    }
}

base_class.prototype = new super_class();

base_class.prototype.constructor = base_class;  //important: pointing the constructor back to the base class.


This is what the basic inheritance is done in JavaScript. If you want to get something fancy , use 

function object(o) {
    function F() {}
    F.prototype = o;
    return new F();
}


See http://javascript.crockford.com/prototypal.html for more information.