Skip to content

Comment on Gitlab – Static passwords set during OmniAuth-based registration (CVE-2022-1162)parent

Comments

I thought I had an account there for a while, I don't know how long (2-3 years?), and all of a sudden I got a password reset out of the blue regarding this particular change. No other emails in my history regarding gitlab whatsoever, so it's even possible I didn't have an account at all.

I go over to the website try to login with my gmail account via SSO which fails because I "already have an account". So I proceed to reset password via email alone.

After I'm in it tells me I've had an account since January 22nd 2022. Super unlikely i created the account this year, so I don't know what's going on over there, but it's not accurate bookkeeping.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.