Top all-time · #18672
Dmitry Chestnykh
Personal blog · dchest.com · on HN as dchestsecurityprogramming
Dmitry Chestnykh's personal blog at dchest.com covers security and programming. Since 2020, 4 different Hacker News readers have linked it 9 times, most often “Show HN: Password authentication for web and mobile apps eBook”. It is still writing: the last post was on 2025-08-09, and you can follow it by feed.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN commenters link Dmitry Chestnykh's authbook on password authentication for web and mobile apps as a 2021 technical book, an auth course resource, and a language-independent guide to secure coding.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Dmitry Chestnykh's blog about tools, online business, technology, programming, and life.
Most-linked posts?
- Show HN: Password authentication for web and mobile apps eBook3 people · 4 mentions · first linked 2020-05-14
What Hacker News says?
Join my copyright pool! https://dchest.com/2022/08/24/ai-licensing/
Comment linking /2022/08/24/ai-licensing/
on “Google removed our website from search because it uses YouTube-dl”Submitted My book on password authentication is out as a story · 3 points
HN discussionPAKE still require storing verifier on the server, which is basically a password hash. There's no significant difference in security between PAKE and a home-grown implementation that Bitwarden uses with respect to password hash leaks from the server database. See my comment here: https://news.ycombinator.com/item?id=25522361 As for Bitwarden's implementation: it doesn't send the password to the server, it sends, bas…
Comment linking /2020/05/25/improving-storage-of-password-encrypted-secrets-in-end-to-end-encrypted-apps/
on “Why we are still using PBKDF2-SHA256 despite being aware of its limitations”Submitted Show HN: Password authentication for web and mobile apps eBook as a story · 2 points
HN discussionFor me it's dchest's "Password authentication for web and mobile apps" https://dchest.com/authbook/
Comment linking /authbook/
on “Ask HN: What excellent technical books have you read in 2021?”Submitted Introducing AI Licensing for My Works as a story · 1 points
HN discussionYou might want to check out https://dchest.com/authbook/
Comment linking /authbook/
on “Ask HN: Any comprehensive courses on Auth?”Submitted Why password peppering in Devise library for Rails is not secure as a story · 1 points
HN discussionCouple links I have found valuable so far. They are not exactly Python / C++, instead they are more about concepts that can be implemented regardless of the programming language. - https://latacora.micro.blog/2018/04/03/cryptographic-right-a... - https://dchest.com/authbook/ - https://cheatsheetseries.owasp.org/index.html - https://ssl-config.mozilla.org/ Also looking for suggestions!
Comment linking /authbook/
on “Ask HN: Resources for learning how to write more secure code?”