Hacker News new | ask | show | jobs
by actsasbuffoon 2966 days ago
It would also be a good idea to search for the hashed version of that user’s password. It’s really bad to leak the unencrypted password when it comes in as a param, but it’s only marginally better to leak the hashed version.