Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.php > #15302

Re: Article: PHP Hash Comparison Weakness A Threat To Websites, Researcher Says

From Jerry Stuckle <jstucklex@attglobal.net>
Newsgroups comp.lang.php
Subject Re: Article: PHP Hash Comparison Weakness A Threat To Websites, Researcher Says
Date 2015-05-10 17:55 -0400
Organization A noiseless patient Spider
Message-ID <miok25$g1d$1@dont-email.me> (permalink)
References <SOydnYeYVLkaLNLInZ2dnUU78VcAAAAA@giganews.com>

Show all headers | View raw


On 5/10/2015 3:29 PM, user1 wrote:
> PHP Hash Comparison Weakness A Threat To Websites, Researcher Says
> 
> "Flaw could allow attackers to compromise user accounts, WhiteHat
> Security's Robert Hansen -- aka 'RSnake' -- says in new finding on
> 'Magic Hash' vulnerability. "
> 
> URL:
> http://www.darkreading.com/vulnerabilities---threats/php-hash-comparison-weakness-a-threat-to-websites-researcher-says-/d/d-id/1320353
> 

Which is not a problem with using proper coding techniques.

-- 
==================
Remove the "x" from my email address
Jerry Stuckle
jstucklex@attglobal.net
==================

Back to comp.lang.php | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Article: PHP Hash Comparison Weakness A Threat To Websites, Researcher Says user1 <none@none.invalid> - 2015-05-10 20:29 +0100
  Re: Article: PHP Hash Comparison Weakness A Threat To Websites, Researcher Says Jerry Stuckle <jstucklex@attglobal.net> - 2015-05-10 17:55 -0400
    Re: Article: PHP Hash Comparison Weakness A Threat To Websites, Researcher Says user1 <none@none.invalid> - 2015-05-10 23:23 +0100
      Re: Article: PHP Hash Comparison Weakness A Threat To Websites, Researcher Says Jerry Stuckle <jstucklex@attglobal.net> - 2015-05-10 18:46 -0400
        Re: Article: PHP Hash Comparison Weakness A Threat To Websites, Researcher Says user1 <none@none.invalid> - 2015-05-11 22:49 +0100
      Re: Article: PHP Hash Comparison Weakness A Threat To Websites, Researcher Says Jim Higgins <ILikeMy@Privacy.invalid> - 2015-05-11 19:53 +0000
        Re: Article: PHP Hash Comparison Weakness A Threat To Websites, Researcher Says "Christoph M. Becker" <cmbecker69@arcor.de> - 2015-05-11 23:06 +0200
          Re: Article: PHP Hash Comparison Weakness A Threat To Websites, Researcher Says user1 <none@none.invalid> - 2015-05-11 22:54 +0100

csiph-web