News for hackers. Stuff that matters.
Re:Using HTTP Basic Auth in 2022 by staticassertion on Saturday January 01, 2022 @04:11PM (#29762840)
A trivial fix here is to:

a) Add a static value to the salt ie: your company's name

b) Add the user's email address to the salt

The "right" way would be a zero knowledge proof.

Re:Using HTTP Basic Auth in 2022 by na85 on Saturday January 01, 2022 @05:07PM (#29763356)
Yeah well PHPnuke wasn't exactly written by secure coding experts.