It shouldn't be possible to leak passwords, they should be hashed before being s... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		anentropic on Oct 3, 2013 \| parent \| context \| favorite \| on: WikiPedia leaks user passwords to volunteers with ... It shouldn't be possible to leak passwords, they should be hashed before being stored in the db surely...?

darklajid on Oct 3, 2013 [–]

The very first line of the link lists

  user information (specifically, user email addresses,
  password hashes, session tokens, and last login timestamp)

So .. yes. Of course.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact