#[fluffy]Love seeing HN commenters bikeshedding on their own terrible ideas about how to do auth. Extra prize goes to the person who implemented it as client-side JavaScript with a poorly-considered hashing scheme that requires passwords to be stored in plain text on the server.