3 ms·
Seems like it’s often the side channels that get people, even when they apply best practices to the primary system. I would be interested to know how passwords
by tridentlead 8y ago
Seems like it’s often the side channels that get people, even when they apply best practices to the primary system. I would be interested to know how passwords got into a log entry though.
- sgloutnikov 8y agoJust got this as well. I changed my password on GitHub about a month ago, and it looks like only those who changed a password were affected. If I have to guess, they maybe saved the plaintext from the form when testing the password reset feature for some reason?
- wintersFright 8y agoI got the alert. My last password change was 2018-02-04
- tridentlead 8y agoI also changed my password pretty recently, this seems like a good candidate for the source of the problem.