4.0.1 Changelog

“An extremely unlikely hash collision could allow a user’s account to be compromised, that also required that they haven’t logged in since 2008 (I wish I were kidding).”

I would love the hear the story about how this was discovered.