villagescc / villagesio2.0

For instructions please check the documentation
4 stars 2 forks source link

sha1 password hashes are in public right now #80

Closed ghost closed 5 years ago

ghost commented 6 years ago

they are sha1'd so there's that but...

in sql_data_migration/villages.sql

COPY auth_user (id, username, first_name, last_name, email, password, is_staff, is_active, is_superuser, last_login, date_joined) FROM stdin; 38 daniel sha1$lmXsIqMznlUl$7e64e37ee160c46e691e46650a2d67dec5f64a48 f t f 2011-11-26 11:53:54.354495+00 2011-11-0$

i mean..it makes sense that they had to move into your possession at some point but...zomg they are public right now.

ghost commented 6 years ago

82