Re:6.5 Million LinkedIn Password Hashes Leaked
by madsr on Wednesday June 06, 2012 @08:59AM
(#4073510)
Yes. The hash I calculated was without a salt (the same way you generate a hash on sites like http://darrenfauth.com/generators/sha1)
[ Parent
| on HN ]
Re:6.5 Million LinkedIn Password Hashes Leaked
by joesmoe4297 on Wednesday June 06, 2012 @11:58AM
(#4074543)
You can get reflected XSS in that field. Paste "<script>alert('XSS')</script>" in the "Value to sha1" input box.
Darren, you should check out output encoding.