Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on NPM security update: Attack campaign using stolen OAuth tokens. Parent comment
There are alternatives to avoid this, on the same model of SSH key authentication where the secret stays on the client-side.
Nothing prevents them from using a password to derive a private key using PBKDF2 in client-side and answer to a specific challenge.
There are no comments on this comment yet.
There are alternatives to avoid this, on the same model of SSH key authentication where the secret stays on the client-side.
Nothing prevents them from using a password to derive a private key using PBKDF2 in client-side and answer to a specific challenge.