Ask HN: I see a popular website not hashing passwords

Re:Ask HN: I see a popular website not hashing passwords by sangupta on Friday November 23, 2012 @02:38AM (#4821267)

Contact the site and give them a time-frame by when they should comply. Politely ask them to comply telling them otherwise you would disclose the site's identity. Also, try and contact security research organizations to notify them of the vulnerability. This would add a little extra pressure on the site's owner to fix the security hole.

My 2 cents.

[ Parent | on HN ]

Re:Ask HN: I see a popular website not hashing passwords by nnash on Friday November 23, 2012 @02:44AM (#4821272)

I don't think an ultimatum would help facilitate the issue being addressed more quickly; I do agree with the latter approach though.

[ Parent | on HN ]

Re:Ask HN: I see a popular website not hashing passwords by tagada on Friday November 23, 2012 @03:16AM (#4821343)

No, you're right ...

Not an ultimatum. Just do it.

Notify it to all important media in tech world. They will take care of that.

[ Parent | on HN ]

Re:Ask HN: I see a popular website not hashing passwords by dsl on Friday November 23, 2012 @04:12AM (#4821496)

I'm still trying to get anyone to care that vmware.com and a few other sites are doing it.

[ Parent | on HN ]