The Cipher Behind QSYRUPWD: Reconstructing IBM i Password Hashes

A dusty corner of big-business computing just got the internet’s favorite makeover: security drama with a side of niche nerd chaos. The article dives into IBM i, the long-running system behind payroll, factories, shipping, and other deeply unglamorous but wildly important work. A researcher found that one built-in function, meant to hand over password data in a supposedly safe way for admin tasks, could still reveal enough to help rebuild password checks on some setups. That matters because these machines may look ancient, but they still sit under a shocking amount of real-world business.

The community reaction, though, was less “calm analysis” and more everyone peeking over the fence at a forgotten fortress. The strongest vibe was amazement that IBM i is still everywhere, mixed with that classic security-world panic: if old enterprise systems are still alive, old enterprise problems are too. And because this is internet comment culture, the one visible reply immediately turned into its own tiny soap opera: “Link stolen from calvin on lobste.rs”. Not a debate about cryptography, not a deep fight over code—just instant credit-policing, the timeless sport of tech forums.

That’s the joke and the drama rolled into one: a story about recovering hidden passwords somehow produced a mini-whodunit over who found the link first. In other words, the article says legacy security is messy, and the community says also, don’t you dare repost without receipts.