News for hackers. Stuff that matters.

A comment on Facebook Stored Hundreds of Millions of User Passwords in Plain Text for Years. Parent comment

Re:Facebook Stored Hundreds of Millions of User Passwords in... by rhacker on Thursday March 21, 2019 @11:53AM (#19453799)
Maybe the HN crowd needs to re-think login security. About 25 years ago challenge-response was a HUGE thing in login security. As https gained momentum and traction that went away. But the nice thing about challenge-response (at least for Javascript enabled clients) is that the password is one-way hashed before sending to the server.

I wonder if it's time to up our game again and go back to that model.

[ Parent | on HN ]
Re:Facebook Stored Hundreds of Millions of User Passwords in... by pferde on Thursday March 21, 2019 @12:55PM (#19454518)
I was just thinking the same thing. There is no reason the password itself even has to be sent over the wire.
[ Parent | on HN ]