News for hackers. Stuff that matters.

A comment on Chat app fined for plaintext passwords under GDPR. Parent comment

Re:Chat app fined for plaintext passwords under GDPR by ketzu on Monday November 26, 2018 @08:39AM (#18533229)
Implementing challenge response in your javascript that you serf yourself is, for the general public, not much different from trusting them to hash it on the server.
[ Parent | on HN ]
Re:Chat app fined for plaintext passwords under GDPR by saurik on Monday November 26, 2018 @03:35PM (#18536565)
We've only had like, what, two decades to add a feature to a web browser that handles this better than "type your password into this box, rendered by the server and controlled by the server to be sent to the server, in a form where it is given exactly the password"?
[ Parent | on HN ]
Re:Chat app fined for plaintext passwords under GDPR by kiriakasis on Tuesday November 27, 2018 @03:48AM (#18540661)
Regarding this point a "generate password" on the right click menu would be fantastic in a browser.

most people use the built in password manager anyway

[ Parent | on HN ]