42 ms·
Maybe many people were just using SELECT * FROM ... and got plain text passwords they weren't necessarily looking for.
by memory_grep 8y ago
Maybe many people were just using SELECT * FROM ... and got plain text passwords they weren't necessarily looking for.
- pard68 8y agoI read the article and this is what I got from it too. I `SELECT *` all the time and see hashed passwords. It is very rare that I need that hash, usually I'm doing something entirely unrelated, but it's just easy to get all the rows and only use what you need, especially when you are troubleshooting and don't even know what you need yet.