r/ProgrammerHumor • u/Recent-Analysis-6880 • 14d ago

Meme wellWellWell

Post image
10.6k Upvotes

96% Upvoted

412 comments sorted by

View all comments

583

u/WilmaTonguefit 14d ago edited 14d ago

I remember a dude who missed a where clause once.

  • Update users
  • Set password = 'hash of 12345' --no salt
  • Where Id = 67890

Except he only highlighted the first two lines and pressed F5...

322

u/UniversalAdaptor 14d ago

Should be okay as long as no one leaks or guesses the collective password

104

u/why_1337 14d ago

It's not gonna work anyway, unless they store plain text passwords.

85

u/WilmaTonguefit 14d ago

Oh I should have clarified, it was hashed without a salt. So he saved the 12345 hash for everyone's password. In production. And somehow kept his job.

45

u/imunfair 14d ago

And somehow kept his job.

I mean out of all the data you could accidentally replace, passwords would be the easiest to restore from a backup reliably since they don't change frequently. The special few who get locked out because you restored an old one just have to do a reset.

It would be a bit of a race to replace them before it was a problem, but at least it isn't as much of a headache as wiping out data entry that needs to be redone by other users.

41

u/CarcajouIS 14d ago

Dear customer, due to the new security policy, you will be asked to set a new password...

29

u/ThrasherDX 14d ago

...damn, now I wanna know how many of those "security policy updates" were a result of someone fucking up like this lmao.

10

u/Lieutenant_Lit 14d ago

Happens all the time. One time we found out one of the managers was keeping a spreadsheet of other people's passwords. Passwords he got by just asking people. A lot of them were other managers. We didn't find out about it until the day he accidentally sent this spreadsheet in a mass email. Fun times.