Re:Show HN: We open-sourced our anime discovery application
by PLejeck on Tuesday June 17, 2014 @03:58PM
(#7906623)
Hummingbird already offers an API through Mashape, which is infinitely more thorough than any competitor's.
Additionally, MAL has lots of minor bugs, and how can you trust a site that hasn't been maintained in 5 years to store your password correctly? 2009 was a scary place.
This is pure speculation, but I wouldn't be surprised if MAL is storing passwords as MD5+salt. They do just email it to you in plaintext when you register.
And recovery is a 6 digit pin, which is totally plenty of entropy.
Re:Show HN: We open-sourced our anime discovery application
by shaldengeki on Wednesday June 18, 2014 @03:13AM
(#7908878)
I can confirm that at least as of 2012 or so they were storing passwords as a salted md5 hash. I did point out to a staff member that this was not a good idea and was brushed off, so I assume this hasn't changed since then.
Also, it's not like MAL is "not updated", since it constantly has new content added - much of it user contributed, but those contributions get locked up behind a server, and we don't have access to it except through the website itself.
I don't suppose you would be offering the ability to query data, which will inevitably be user-contributed?