Preferences

Author of this article learned a lot about password hashing, missed the detail that this was in logs, not the database. Usually you try to avoid logging passwords, you don’t hash them in logs.

Yup. A bunch of coverage is understating this point, and the peanut gallery commenters are taking it hook, line, and sinker. Accidentally logging plaintext passwords, whilst concerningly incompetent, is not on the same level as explicitly deciding to store plaintext passwords.

This item has no comments currently.

Keyboard Shortcuts

Story Lists

j
Next story
k
Previous story
Shift+j
Last story
Shift+k
First story
o Enter
Go to story URL
c
Go to comments
u
Go to author

Navigation

Shift+t
Go to top stories
Shift+n
Go to new stories
Shift+b
Go to best stories
Shift+a
Go to Ask HN
Shift+s
Go to Show HN

Miscellaneous

?
Show this modal