How can this even happen, technically?
Buffer: Bug in Login System
11–14 of 14 posts
Re: Buffer: Bug in Login System
#12How can this even happen, technically?
[deleted]
Re: Buffer: Bug in Login System
#13How can this even happen, technically?
It seems 2 accounts coincidentally get the same login token. Not sure how this could happen, perhaps a problem with the hash algorithm?
Re: Buffer: Bug in Login System
#14My only question is why they built their own login system? Isn't this a golden rule: never build your own auth.
No, the golden rule is never build your own crypto . Building your own auth is damn near inevitable unless you are running a fairly simple operation and off the shelf Django or RoR components are good enough.
Actually, it should be never build your own non-open source crypto.