{"action":"created","issue":{"url":"https://api.github.com/repos/piwik/piwik/issues/5728","repository_url":"https://api.github.com/repos/piwik/piwik","labels_url":"https://api.github.com/repos/piwik/piwik/issues/5728/labels{/name}","comments_url":"https://api.github.com/repos/piwik/piwik/issues/5728/comments","events_url":"https://api.github.com/repos/piwik/piwik/issues/5728/events","html_url":"https://github.com/piwik/piwik/issues/5728","id":37356440,"number":5728,"title":"Passwords: use better algorithm than md5 hash, use salts and maintain BC","user":{"login":"anonymous-piwik-user","id":7777743,"avatar_url":"https://avatars.githubusercontent.com/u/7777743?v=3","gravatar_id":"","url":"https://api.github.com/users/anonymous-piwik-user","html_url":"https://github.com/anonymous-piwik-user","followers_url":"https://api.github.com/users/anonymous-piwik-user/followers","following_url":"https://api.github.com/users/anonymous-piwik-user/following{/other_user}","gists_url":"https://api.github.com/users/anonymous-piwik-user/gists{/gist_id}","starred_url":"https://api.github.com/users/anonymous-piwik-user/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/anonymous-piwik-user/subscriptions","organizations_url":"https://api.github.com/users/anonymous-piwik-user/orgs","repos_url":"https://api.github.com/users/anonymous-piwik-user/repos","events_url":"https://api.github.com/users/anonymous-piwik-user/events{/privacy}","received_events_url":"https://api.github.com/users/anonymous-piwik-user/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/piwik/piwik/labels/c:%20Security","name":"c: Security","color":"fad8c7"},{"url":"https://api.github.com/repos/piwik/piwik/labels/Enhancement","name":"Enhancement","color":"bfd4f2"},{"url":"https://api.github.com/repos/piwik/piwik/labels/Major","name":"Major","color":"eb6420"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/piwik/piwik/milestones/92","html_url":"https://github.com/piwik/piwik/milestones/3.0.0-b3","labels_url":"https://api.github.com/repos/piwik/piwik/milestones/92/labels","id":1571461,"number":92,"title":"3.0.0-b3","description":"","creator":{"login":"mattab","id":466765,"avatar_url":"https://avatars.githubusercontent.com/u/466765?v=3","gravatar_id":"","url":"https://api.github.com/users/mattab","html_url":"https://github.com/mattab","followers_url":"https://api.github.com/users/mattab/followers","following_url":"https://api.github.com/users/mattab/following{/other_user}","gists_url":"https://api.github.com/users/mattab/gists{/gist_id}","starred_url":"https://api.github.com/users/mattab/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mattab/subscriptions","organizations_url":"https://api.github.com/users/mattab/orgs","repos_url":"https://api.github.com/users/mattab/repos","events_url":"https://api.github.com/users/mattab/events{/privacy}","received_events_url":"https://api.github.com/users/mattab/received_events","type":"User","site_admin":false},"open_issues":6,"closed_issues":1,"state":"open","created_at":"2016-02-08T22:29:26Z","updated_at":"2016-09-13T12:23:01Z","due_on":"2016-10-30T11:00:00Z","closed_at":null},"comments":40,"created_at":"2008-07-19T18:36:19Z","updated_at":"2016-09-26T19:08:55Z","closed_at":null,"body":"What I can see from code is that passwords are hashed with md5, but without a salt. That's not secure enough, take look at here: http://ilia.ws/archives/68-MD5-Dictionary-Attacks.html\r\n\r\nSee also the request to use different salts for different hashes: #3051\r\n"},"comment":{"url":"https://api.github.com/repos/piwik/piwik/issues/comments/249666946","html_url":"https://github.com/piwik/piwik/issues/5728#issuecomment-249666946","issue_url":"https://api.github.com/repos/piwik/piwik/issues/5728","id":249666946,"user":{"login":"tsteur","id":273120,"avatar_url":"https://avatars.githubusercontent.com/u/273120?v=3","gravatar_id":"","url":"https://api.github.com/users/tsteur","html_url":"https://github.com/tsteur","followers_url":"https://api.github.com/users/tsteur/followers","following_url":"https://api.github.com/users/tsteur/following{/other_user}","gists_url":"https://api.github.com/users/tsteur/gists{/gist_id}","starred_url":"https://api.github.com/users/tsteur/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tsteur/subscriptions","organizations_url":"https://api.github.com/users/tsteur/orgs","repos_url":"https://api.github.com/users/tsteur/repos","events_url":"https://api.github.com/users/tsteur/events{/privacy}","received_events_url":"https://api.github.com/users/tsteur/received_events","type":"User","site_admin":false},"created_at":"2016-09-26T19:08:55Z","updated_at":"2016-09-26T19:08:55Z","body":"be worth having a look into it for sure. Would probably only need to check how to flag it."}}
{"actor":{"display_login":"tsteur"}}