Hacker News new | past | comments | ask | show | jobs | submit login

LTT found out the hard way, their attacker had a session token for an employee and changing everyone’s passwords didn’t lock the attacker out.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: