13-Year-Old Password Security Bug Fixed

arglebargle_xiv writes "In a sign that many eyes don't really make (security) bugs shallow, a thirteen-year-old password-hashing bug that affects (at least) PHP, some Linux distros (Owl, ALT Linux, SUSE), and a variety of other apps has just been patched. This problem had been present in widely-used code since 1998 without anyone noticing it." Better late than never; reader Trailrunner7 points to this article outlining the dangers of old exploits, given old code for them to toy with.

Re:Not unprecedented

[martin-boundary]

Exactly. In Windows, you'd simply be told to reboot frequently enough so the password bug doesn't get triggered :)

Re:Come on, it's PHP

[A beautiful mind]

I'm an advanced slashdot user, I don't even read the summary anymore.