logoalt Hacker News

radial_symmetry • yesterday at 6:01 PM • 3 replies • view on HN

"- API tokens are now stored only as hashes, which limits the impact of any similar incident."

WTF were they not already?


Replies

shipsafestack • yesterday at 6:13 PM

[flagged]

bombcar • yesterday at 6:26 PM

The number of systems that will show me the API token more than once makes me realize that many haven't figured out it is just a long password and should be treated exactly as such.

➕ show 1 reply
LunaSea • yesterday at 6:17 PM

And you're absolutely right to push back on that.