szurubooru/server
Eva a2d8454880 server/posts: file sha1 in filenames and prevent offline secret cracking
Imagine if we had a bunch of simple strings encrypted with the same key
we use to salt passwords, publicly accessible, which would undermine
our salting model by removing the requirement of filesystem access to
crack our users' passwords, requiring only database access and offline
cracking of our secret.
Wouldn't that be fun?
2023-05-22 11:54:39 +02:00
..
szurubooru server/posts: file sha1 in filenames and prevent offline secret cracking 2023-05-22 11:54:39 +02:00
.dockerignore client+server: implement code autoformatting using prettier and black 2020-06-06 08:58:23 -04:00
.flake8 client+server: implement code autoformatting using prettier and black 2020-06-06 08:58:23 -04:00
alembic.ini PR fixes 2020-06-02 17:43:18 -07:00
config.yaml.dist client: add bulk delete feature (#459) 2023-01-19 18:44:31 +01:00
dev-requirements.txt server/tests: use postgresql test database 2020-03-06 18:15:25 -05:00
docker-start.sh Make waitress thread count configurable. 2022-02-14 17:33:23 -05:00
Dockerfile server: fix build error due to broken pip requirements 2022-03-31 18:43:37 -04:00
pyproject.toml client+server: implement code autoformatting using prettier and black 2020-06-06 08:58:23 -04:00
requirements.txt server: fix build error due to broken pip requirements 2022-03-31 18:43:37 -04:00
szuru-admin server/szuru-admin: Add thumbnail regeneration script 2022-03-30 23:04:16 -04:00