Learn More
Resend Email
51
moars42
7y

My brother singed up for a browser game.... They sent him his log data (including password) via email

undefined

security

password

please hash
Favorite
Ranter
Comments
  • 2
    7y
    Did you contact the devs to tell them to do therir job?
  • 2
    7y
    Submit them to the badpasswordpolicies Tumblr!
  • 5
    7y
    Well although that's very bad practice imo, it doesn't mean by default that they don't hash. Can hash the password, store it and send the original value through email all from the same script, right?
  • 4
    7y
    @linuxxx still insecure imho..
  • 2
    7y
    @sladuled Yeah agreed but just stating the fact that I'd you receive a password by email, it doesn't mean by default that it doesn't get hashed :)
  • 0
    7y
    Password he chose or a temporary password? Sending a temporary password is a practice done by many as it forces you indirectly to verify your mail.
  • 0
    7y
    His password
Related Rants
devRant © 2021 Hexical Labs LLC
Privacy Policy  |  Terms of Service
Add Comment