How to Safely Store Your Users' Passwords in 2016

Re:How to Safely Store Your Users' Passwords in 2016 by gist on Wednesday February 17, 2016 @02:50PM (#11120691)

I don't think you should out them publicly. Are you interested in having them improve their security model [1] or do you want to have what they have they done out in the open so that others can try to social engineer them and their customers might suffer the consequences?

[1] If so, tell them about this in a way that will get their attention without causing their customers or them any harm.

[ Parent | on HN ]

Re:How to Safely Store Your Users' Passwords in 2016 by jordonias on Wednesday February 17, 2016 @02:56PM (#11120746)

You're correct. I'll contact them.

[ Parent | on HN ]

Re:How to Safely Store Your Users' Passwords in 2016 by AstralStorm on Wednesday February 17, 2016 @04:15PM (#11121465)

Always have a reasonable response deadline. For a security issue, above 1 month is unreasonable for a small deployment, above 3 months in a huge deployment in my opinion.

[ Parent | on HN ]