I'm not convinced by their salted claim, I thought Drupal 6 (what drupal.org is ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

mjpa on May 29, 2013 | parent | context | favorite | on: Drupal.org compromised

I'm not convinced by their salted claim, I thought Drupal 6 (what drupal.org is on) only did MD5() for passwords? Drupal 7 has the more securely hashed passwords.

HiddenIncome on May 29, 2013 | [–]

Drupal.org runs D6 with the phpass module, basically the stuff that went into Drupal 7.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact