All posts
Güvenlik
2 posts
- 01September 18, 2026 · 3 min read
The Weakest Link in Your System: The MD5 Fallacy and Secure Password Hashing
Storing passwords in plain text or with MD5 in your database is a massive mistake. To prevent password cracking that takes seconds with rainbow tables, we have to accept that speed is a vulnerability.
- 02September 15, 2026 · 2 min read
JWT Is Not Encrypted, Just Base64
Who can see what's inside the JWT token sent with every request of your app? Answer: everyone. Here's what tokens actually store, why signature verification is enough, and 4 things you should never put in the payload.
