156
OP finds vulnerability where a forum sends you your password in plaintext over email and everyone misses the forest for the trees (lemmy.world)
submitted 3 years ago by to c/programming@programming.dev
85 comments fedilink hide all child comments
 

This thread is frustrating. Everyone seems more interested in nitpicking the specifics of what OP is saying and are ignoring that a forum sends you your password (not an automatically generated one) in an email on registration.

you are viewing a single comment's thread
view the rest of the comments
[–] 7 points 3 years ago (2 children)

But in situations like this there is a much larger chance it’s being stored in plain text.

I suppose, but OP said in the title that the passwords were being stored in plaintext, despite that not being the case.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 3 years ago (1 child)

    Using "we use a reversible hash" to claim "we don't store passwords in plain text" is the "corn syrup is not sugar" of the cybersecurity world.

    It's technically correct, while also a bald faced lie.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •