I wish security experts would spend more time writing libraries. "Never roll your own security" isn't helpful when all you have are scrypt, bcrypt, and pbkdf, and you have to implement a complete auth system by yesterday.
It is a lot more fun to poke holes than to be poked, though, so I understand it.
It is a lot more fun to poke holes than to be poked, though, so I understand it.