Rehashing opportunistically on login is fine, but leaves a long tail of weaker password hashes. Here’s one weird trick to get rid of them.

A busy week of retiring our old IAM solution, increasing hash iterations on PBKDF2, then dumping the algorithm completely.

A test helper in Go to avoid long, unsightly assertion lists.

Giving a self-assessment on predictions I made in the depths of San Francisco lockdown.

AI is officially scary, just not for any of the reasons we thought it would be.