On: Security Update

[tgsovlerkhgsel]

> MD5 is vulnerable. Why pick anything remotely vulnerable, when you don't have to? SHA-2

For the purpose of hashing passwords, there's no significant difference between MD5 and SHA-2. Both are awful choices.

Edit: Actually, SHA-2 may be worse because CPUs have hardware acceleration and thus the attacker may be able to crack it somewhat faster than MD5.

[zenexer → tgsovlerkhgsel]

It’s definitely not worse—MD5 is faster with GPUs—but plain SHA-2 isn’t much better, either.