News for hackers. Stuff that matters.
Re:Pandora doesn't hash their passwords by jmediast on Friday September 21, 2012 @02:15AM (#4552563)
It seems like they "fixed" people being able to read the passwords by replacing the the form value with __USE_EXISTING__...

It's still trivial to automate account takeover though. Here's a PoC to take over pandora accounts on your network using MITMProxy and Tornado: https://github.com/JackWink/Pandora-Account-Takeover-Tool

There are no comments on this comment yet.