Hacker News new | past | comments | ask | show | jobs | submit
bombcar | on: Apify Security Incident
The number of systems that will show me the API token more than once makes me realize that many haven't figured out it is just a long password and should be treated exactly as such.
0127 | parent
Except maybe using faster hashing, depending on usage