Troy Hunt: 5 website security lessons courtesy of Stratfor.

This wasn’t intended to be a Stratfor-bashing post, rather it’s an opportunity to see the fate which awaits those who don’t take website security seriously. Call it a quick reality check if you will.

Insightful lessons to be learned from analyzing the Stratfor breach:

1. There doesn’t need to be a reason for you to be hacked
2. The financial abuse of your customers will extend long and far
3. Your customers’ other online services will be compromised
4. Saltless password hashes are a thin veneer of security
5. Your dirty software laundry will be aired quickly