News for hackers. Stuff that matters.

A comment on Hosting Provider Leaked 63M Records Including Magento and WordPress Credentials. Parent comment

Re:Hosting Provider Leaked 63M Records Including Magento and... by dboreham on Thursday November 05, 2020 @07:42AM (#24997724)
Implement a proxy authentication scheme for the hosted services (WP, etc). Now an admin working for the hosting provider can log in using a password checked against a hash stored in their hosting system. No plaintext passwords stored.
[ Parent | on HN ]
Re:Hosting Provider Leaked 63M Records Including Magento and... by Closi on Thursday November 05, 2020 @02:35PM (#25001186)
> the hosting provider can log in using a password checked

Hmm, but where is this password stored? This sounds like exactly what they were doing!

[ Parent | on HN ]