4 ms·
So the original issue was described as a leak of github oauth tokens, and made it sound like the risk would be someone using oauth tokens to access github repos
by Ozzie_osman 4y ago
So the original issue was described as a leak of github oauth tokens, and made it sound like the risk would be someone using oauth tokens to access github repos.
Resetting passwords implies something else may have been compromised (passwords, either hopefully encrypted), but is a pretty scary ask for them to make without providing more context here.
Trainwreck indeed.
- andreareina 4y agoI certainly hope that passwords aren't encrypted but run through an appropriately-expensive password hash.
- Ozzie_osman 4y agoYes, I should have said hashed not encrypted.
- zeepzeep 4y agohashing is one-way encryption tho
- Tiddles-the2nd 4y agoThat's the point, take a look into salting + hashing passwords
- matthewcford 4y agoResetting the password resets your API key, which is different from the Oauth tokens.