There is not much difference between getting a valid hash that I can use to log-in to your
application, or a cleartext password. I have access to your data.
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4018199#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...