1-866-PLYNT-24
|
Yahoo Login drops Salted Hashes
This morning Vinaya pointed out that Yahoo login is not using salted hashes now. Instead, all logins - both standard and secure - work over SSL.
All the old code for salted hashes is still strewn on the yahoo login page. It’s just that the password hashes are not calculated any longer. Is this a bug? Or has Yahoo dropped the Salted Hash scheme for good? Watch this space for upcoming news :)
If you’re wondering what’s so special about salted hashes, you might want to check these earlier posts.
Plynt provides penetration testing and code review services to clients worldwide. If you are interested, please contact us for a quote. We’ll get back to you within one working day.Add yours.closed for this post.
For a newby like me with Yahoo, have I got something to worry
about when I login.? I logged in Tonight and I had a Secure site came up and disapeared is this the "New Yahoo"?
Thank you
Monthly Archives
- September 2008
- August 2008
- July 2008
- May 2008
- April 2008
- March 2008
- January 2008
- December 2007
- November 2007
- April 2007
- March 2007
- February 2007
- January 2007
- August 2006
- July 2006
- June 2006
- May 2006
- April 2006
- March 2006
- February 2006
- November 2005
- October 2005
- September 2005
- August 2005
- July 2005
- June 2005
- May 2005
Syndication
You can read full entries of Palisade Blog using an RSS reader. Use this link —
Probably they are preparing for the new Yahoo Mail, which is currently under beta testing.