News for hackers. Stuff that matters.

A comment on Disqus Security Alert: User Info Breach. Parent comment

Re:Disqus Security Alert: User Info Breach by TheRealWatson on Friday October 06, 2017 @08:16PM (#15421453)
What if you need to update the password of one of the sites (e. g. this disqus breach) ? What if the domain name changes?
[ Parent | on HN ]
Re:Disqus Security Alert: User Info Breach by jMyles on Friday October 06, 2017 @08:19PM (#15421470)
Maybe the program can take an integer nonce in addition. Then you have to track how many times you've used it for a particular domain.

And if the domain name changes: you just keep generating for the old domain and tell the program to override.

These seem like relatively simple challenges.

[ Parent | on HN ]