News for hackers. Stuff that matters.

A comment on npm (Node's package manager) leaks all user password hashes and salts. Parent comment

Re:npm (Node's package manager) leaks all user password hash... by grandpoobah on Sunday March 11, 2012 @07:53PM (#3691689)
Wouldn't npm client be sending the hashed version of the password rather than the password itself? then the server only has to compare the two hashes.
[ Parent | on HN ]

There are no comments on this comment yet.