News for hackers. Stuff that matters.

throwaway015089

Unfortunately Home Assistant is very difficult to package for Linux, and upstream is not cooperating.
Re:You might not need to store (plaintext) emails on Thursday November 05, 2020 @07:15AM (#24997555)
1) A new password is accepted using an email validation and the previous hash is replaced

2) The url with token is used only for logging in and the user is forwarded to the home, just like the email confirmation links in emails

Re:You might not need to store (plaintext) emails on Monday November 02, 2020 @02:48PM (#24972321)
1) you can hash together email + randomsalt + password and then store randomsalt and the hashed value

2) you avoid passwords altogether by giving a user an authentication token to be saved as a bookmark perhaps? The token contains a cryptographic signature