Why PayPal is telling you about the DigiCert Global Root G2 Chain

PayPal DigiCert Root Certificate G2 MessageIf you have a PayPal account – and especially if you’re selling anything and getting paid via PayPal – then you’ve no doubt received a strange e-mail (or ten) recently.

In short, you’re supposed to add the DigiCert Global Root G2 Chain to your “trusted store”.

Bad things will happen if you don’t!

More stuff to fix, right? Not so fast…

What’s really going on here?

(more…)

How does password authentication work on web sites?

Ashley Madison HackedI recently read an article about the Ashley Madison hack. For those of you who aren’t into cheating on your spouse, Ashley Madison is a web site where you can sign up and meet up with other lovely people in order to have an affair.

Anyway, they were recently hacked. More than 11 million passwords were obtained, and the reason why made me fall off my chair.

In short, the users’ usernames + passwords were stored in the site’s database in an MD5 hash – along side a BCrypt hash of the user’s password.

Well, what does all this mean to you?

(more…)