156
OP finds vulnerability where a forum sends you your password in plaintext over email and everyone misses the forest for the trees (lemmy.world)
submitted 3 years ago by to c/programming@programming.dev
85 comments fedilink hide all child comments
 

This thread is frustrating. Everyone seems more interested in nitpicking the specifics of what OP is saying and are ignoring that a forum sends you your password (not an automatically generated one) in an email on registration.

you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 3 years ago (2 children)

Why wouldn't it be generated and sent immediately? If someone has the inclination to do this type of thing, they probably also want to do things synchronously and immediately.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 3 years ago (1 child)

    Because one egregious decision normally begets another.

    Look at it this way, if you walk into a pizza joint and there are roaches wandering around on the walls, is it not more likely the food is also unsafe to eat?

    Yes, this could just be one horrible decision, but this decision shows you where the mind of the developer/team was when thinking through their security.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •