Top all-time · #16024
Michal Špaček
Personal blog · michalspacek.comsecurity
Michal Špaček's personal blog at michalspacek.com covers security. Since 2017, 4 different Hacker News readers have linked it 4 times. The last post was in 2024, but the archive is still widely read.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
HN readers link Michal Špaček's posts on security topics such as upgrading existing password hashes and HTTPS certificate lifetime limits. One commenter calls the linked articles excellent.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
What Hacker News says?
Some people much smarter than me have written excellent articles about this topic: https://www.michalspacek.com/upgrading-existing-password-has...
Comment linking /upgrading-existing-password-hashes
on “Launch HN: Stack Auth (YC S24) – An Open-Source Auth0/Clerk Alternative”Submitted Post a boarding pass on Facebook, get your account stolen as a story · 726 points
HN discussionCertificates have a great timespan like "do not use before" and "do not use after". So you can't simply shown outdated certs because this make time totally useless. But you also can't shown cert from the future. Other sad news - new browsers set that certs can have lifetime only for year and month: https://www.michalspacek.com/maximum-https-certificate-lifet... to effective fight against certs that are too long life…
Comment linking /maximum-https-certificate-lifetime-to-be-1-year-soon
on “Krebsonsecurity.com has an expired SSL certificate”Submitted Top coffee brands according to Have I Been Pwned as a story · 2 points
HN discussion