Skip to main content
replaced http://security.stackexchange.com/ with https://security.stackexchange.com/
Source Link
replaced http://security.stackexchange.com/ with https://security.stackexchange.com/
Source Link
replaced http://security.stackexchange.com/ with https://security.stackexchange.com/
Source Link

Meme: Don't be a Dave!

Originator: @Polynomial, @LucasKauffman, others

Cultural Height: December 2012

Background: One of our most popular questions of all timemost popular questions of all time, with over 17 thousand views in the space of 3 weeks, had as its subject poor old Dave:

My developer, let's call him 'Dave', insists on using a home-brew script for hashing passwords. See Dave's proposal below...

Dave got a bit of flack for this approach, which is a wonderful target for old hands at security, and the ensuing discussions have led to questions like these being called out as 'Dave' questions, eg:

Lucas Kauffman: We've got a dave

There's also Dave's false maximDave's false maxim, which states:

If I add more crypto things, it will be more secure.

Meme: Don't be a Dave!

Originator: @Polynomial, @LucasKauffman, others

Cultural Height: December 2012

Background: One of our most popular questions of all time, with over 17 thousand views in the space of 3 weeks, had as its subject poor old Dave:

My developer, let's call him 'Dave', insists on using a home-brew script for hashing passwords. See Dave's proposal below...

Dave got a bit of flack for this approach, which is a wonderful target for old hands at security, and the ensuing discussions have led to questions like these being called out as 'Dave' questions, eg:

Lucas Kauffman: We've got a dave

There's also Dave's false maxim, which states:

If I add more crypto things, it will be more secure.

Meme: Don't be a Dave!

Originator: @Polynomial, @LucasKauffman, others

Cultural Height: December 2012

Background: One of our most popular questions of all time, with over 17 thousand views in the space of 3 weeks, had as its subject poor old Dave:

My developer, let's call him 'Dave', insists on using a home-brew script for hashing passwords. See Dave's proposal below...

Dave got a bit of flack for this approach, which is a wonderful target for old hands at security, and the ensuing discussions have led to questions like these being called out as 'Dave' questions, eg:

Lucas Kauffman: We've got a dave

There's also Dave's false maxim, which states:

If I add more crypto things, it will be more secure.

Added Dave's false maxim.
Source Link
Polynomial
  • 136.3k
  • 1
  • 20
  • 22
Loading
Source Link
Rory Alsop Mod
  • 61.8k
  • 2
  • 54
  • 113
Loading