@googlegroups.com
Subject: Re: [google-appengine] Help resolve massive performance
regression in 2.7 vs 2.5 runtime
Hi Brandon,
What you say is fine if your threat model only includes script
kiddies who don't have your source code. If either of those is not true
-
you have an adversary with some
*To:* google-appengine@googlegroups.com
*Subject:* Re: [google-appengine] Help resolve massive performance
regression in 2.7 vs 2.5 runtime
** **
Hi Brandon,
** **
What you say is fine if your threat model only includes script kiddies
who don't have your source code. If either of those
@googlegroups.com] *On Behalf Of *Nick Johnson
*Sent:* Monday, November 14, 2011 6:21 PM
*To:* google-appengine@googlegroups.com
*Subject:* Re: [google-appengine] Help resolve massive performance
regression in 2.7 vs 2.5 runtime
** **
Hi Brandon,
** **
What you say is fine if your threat model
-appengine@googlegroups.com] *On Behalf Of *Nick Johnson
*Sent:* Monday, November 14, 2011 6:21 PM
*To:* google-appengine@googlegroups.com
*Subject:* Re: [google-appengine] Help resolve massive performance
regression in 2.7 vs 2.5 runtime
** **
Hi Brandon,
** **
What you say is fine
-
From: google-appengine@googlegroups.com
[mailto:google-appengine@googlegroups.com] On Behalf Of Brian Quinlan
Sent: Saturday, November 12, 2011 6:58 PM
To: google-appengine@googlegroups.com
Subject: Re: [google-appengine] Help resolve massive performance regression
in 2.7 vs 2.5 runtime
Hi Pol
, November 14, 2011 3:56 PM
To: google-appengine@googlegroups.com
Subject: Re: [google-appengine] Help resolve massive performance regression
in 2.7 vs 2.5 runtime
No! Please, please don't do this. Obscurity is no substitute for security.
1) Bcrypt or similar is not 'overkill' no matter who you
*To:* google-appengine@googlegroups.com
*Subject:* Re: [google-appengine] Help resolve massive performance
regression in 2.7 vs 2.5 runtime
** **
No! Please, please don't do this. Obscurity is no substitute for security.
** **
1) Bcrypt or similar is not 'overkill' no matter who you
It doesn't matter if you can have your ATI card up and running sooner if
every single password attempt takes a whole lot longer to try. That is the
main strength of bcrypt.
--
You received this message because you are subscribed to the Google Groups
Google App Engine group.
To view this
, 2011 6:21 PM
To: google-appengine@googlegroups.com
Subject: Re: [google-appengine] Help resolve massive performance regression
in 2.7 vs 2.5 runtime
Hi Brandon,
What you say is fine if your threat model only includes script kiddies who
don't have your source code. If either of those
Hi Pol,
On Sun, Nov 13, 2011 at 1:48 PM, Pol p...@everpix.net wrote:
Hi,
Since switching to 2.7 runtime, logging in to http://www.everpix.com
went from about a second to anywhere from 15s to 60s. I tracked it
down to this single password checking line:
from bcrypt import bcrypt
-appengine@googlegroups.com] On Behalf Of Brian Quinlan
Sent: Saturday, November 12, 2011 6:58 PM
To: google-appengine@googlegroups.com
Subject: Re: [google-appengine] Help resolve massive performance regression
in 2.7 vs 2.5 runtime
Hi Pol,
On Sun, Nov 13, 2011 at 1:48 PM, Pol p...@everpix.net wrote:
Hi
11 matches
Mail list logo
