News for hackers. Stuff that matters.

A comment on Twitter urges users to change passwords after computer 'glitch'. Parent comment

Re:Twitter urges users to change passwords after computer 'g... by hunter2_ on Thursday May 03, 2018 @06:40PM (#16990680)
"Since if someone has it, they can just send it to the server for auth" unless it's only good for a few moments (the form you type it into constantly polling for a new nonce).
[ Parent | on HN ]
Re:Twitter urges users to change passwords after computer 'g... by deepbreath on Thursday May 03, 2018 @09:36PM (#16991557)
The server would not be able to verify a changing hash without knowing the password
[ Parent | on HN ]
Re:Twitter urges users to change passwords after computer 'g... by jimktrains2 on Thursday May 03, 2018 @07:24PM (#16990905)
Or you could just use PAKE or SRP.
[ Parent | on HN ]