Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
theonewolf
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
12 ms
·
151.
▲
by
theonewolf
14y ago
I wasn't advocating for blindly using SSL, only to fix things short-term. Long-term I'd hope for better handling of passwords. This isn't a huge deal to me, I just want a warning out there for people to use throwaway passwords.
152.
▲
by
theonewolf
14y ago
The problem is that people are signing up with real passwords today without being warned that they _could_ be being compromised. Yes, _tomorrow_ it might be fixed. But today no one knows there is an issue and their password has been expose
153.
▲
by
theonewolf
14y ago
I'm trying to prevent other people from using passwords that matter because there is no warning at all.
154.
▲
by
theonewolf
14y ago
I'm not sure what you mean by not available yet. It is being publicly advertised and accepting signups+logins.
155.
▲
by
theonewolf
14y ago
The problem is that people are signing up and may be using passwords which they do use on a bank website etc. Man-in-the-middle ARP attacks or even just sniffing the wire will reveal your password to attached machines on the path from you t
156.
▲
by
theonewolf
14y ago
I agree, the top comment confused me... It's new and could be pretty nice especially for younger people.
157.
▲
by
theonewolf
14y ago
It depends on your login process. For signing up to a site, you generally will want/need HTTPS. For login, what is transported on the wire can be a hash or some form of the password which is no longer plaintext. Thus, _logins_, may not nee
158.
▲
by
theonewolf
14y ago
Hey, it's no big deal. I fully understand product launches :-) I just wanted a warning out there for people so they don't use real passwords. I am still of the opinion that you should put a red warning on the web site, or disable signups/l
159.
▲
by
theonewolf
14y ago
hey passwords are being sent plaintext ( https://gist.github.com/3020091/ ). be careful if you signup/when you log in. use a password you don't care about, or use a throwaway.
160.
▲
Hackerrank.com sends passwords in the clear
(gist.github.com)
29 points
by
theonewolf
14y ago
|
39 comments
161.
▲
Visualization of 98 course projects for 15-441 Computer Networks CMU
(youtube.com)
2 points
by
theonewolf
15y ago
|
0 comments