Programming: Security

Some general rules:

• security by obscurity isn't security at all
• run applications as a user with the minimum possible permissions to limit what can be done if compromised

https://thomashunter.name/blog/password-encryption-hashing-salting-explained/	salting/hashing/encryption in the database
https://crackstation.net/hashing-security.htm	very detailed overview of how, and why to salt/hash passwords. Also describes common attack types.