Ubuntu Forums are back up and a post mortem

Re:Ubuntu Forums are back up and a post mortem by bashinator on Tuesday July 30, 2013 @08:13PM (#6131015)

In the "What We've Done" section, there's no mention of changing the password hashing algorithm away from md5 to bcrypt or PBKDF2.

[ Parent | on HN ]

Re:Ubuntu Forums are back up and a post mortem by richadams on Tuesday July 30, 2013 @08:22PM (#6131056)

Later in the page (in the "Hardening" section), they mention that they've switched the forums to use Ubuntu SSO for authentication, instead of needing to store forum passwords.

[ Parent | on HN ]

Re:Ubuntu Forums are back up and a post mortem by plywoodtrees on Wednesday July 31, 2013 @01:59AM (#6132128)

And I wonder what hashing approach Ubuntu SSO uses?

[ Parent | on HN ]

Re:Ubuntu Forums are back up and a post mortem by rlpb on Wednesday July 31, 2013 @06:21AM (#6132761)

I think this is an unreasonable expectation if the upstream vBulletin code doesn't support it.

[ Parent | on HN ]