3 ms·
"Password stored in cleartext" - wait, what?! Where have you seen a reference to that?
by oneeyedpigeon 11y ago
"Password stored in cleartext" - wait, what?! Where have you seen a reference to that?
- scoot 11y agoFrom the help page: "TalkTalk will also NEVER Send you emails asking you to provide your full password. We will only ever ask for two digits from it to protect your security." AFAIK, you can't verify two randomly selected characters to a hashed password. My bank is also guilty of this. Edit: direct evidence from TalkTalk: https://twitter.com/TalkTalkCare/status/514417284560191488?ref_src=twsrc%5Etfw https://twitter.com/TalkTalkCare/status/514417284560191488?r...
- donnycantdance 11y agoYou can achieve this by hashing all the possible combinations that you could ask for with a salt and store those.