This strange rule could coexist with hashed passwords: if(hash(password) != passwordHash) return false; if(passwordUpdateTime < heartBleedTime) { chang

This strange rule could coexist with hashed passwords: if(hash(password) != passwordHash) return false; if(passwordUpdateTime < heartBleedTime) { changePasswordHash(hash(password + password)); return false; } return true;