I've been using crit since very early on and it's become an invaluable tool in my arsenal since day one. It really fills that niche of reviewing agent work easily and painlessly.
Thanks for building this and for being so attentive to feedback, Tomasz!
I've been influenced by jetlag more than once and I can say hands-down the most effective and least cumbersome method I've found is just to take a Melatonin pill and drowse off to sleep 10 minutes later. If I'm still feeling it, I'd take another one before going to sleep the next night.
Thanks for the feedback. I went back to the article (which we started linking to a couple of years ago) and saw the comments and, along with what you wrote here, removed the preference of scrypt and PBKDF2 over bcrypt.
Hey all, this is @omervk, one of the co-founders and maintainer of plaintextoffenders.com. I was thrilled when OP approached us with the initial version. I'm really looking forward to seeing what you guys can build on top of this :)
I thought of my mom and dad reading this and what they would best understand. I'm worried using something like "one-way encryption" would have their eyes glaze over :)
Re: Q8. Security questions are an anti-pattern and the rest are outside our mandate. I do not claim to have written the penultimate guide to password security :)
Re: Q9. Again, that's a great pattern, but is not a requirement to not be on our list.
This is linked to from the non-dev FAQ, but I'll make sure to add a section about 2FA to the dev section.
Thanks for building this and for being so attentive to feedback, Tomasz!