4 ms·

MyPasswordBuddy: An incredibly insecure password manager

6 points by caryme 17y ago

I happened across this site today and made an account for kicks. There is no https, your user password is stored in the clear, and in my short time on the site I got a database error. I hope no one uses it.

teuobk 17y ago
I'm a bit confused: is this meant to promote the site or to criticize it?
- clistctrl 17y ago
  it seems to be vulnerable to sql injection... so my guess is criticize
  - Nyarly 17y ago
    "Hey! Tell me all your passwords and the sites they're associated with!" And you're worried about sql injection?
lurkinggrue 17y ago
I try to add an account and all I get is: Microsoft OLE DB Provider for SQL Server error '80040e14' Incorrect syntax near ','. /web/admin/onlinepasswordmanager/default.asp, line 1039
markgamache 17y ago
No SSL. Sign me up!
thepsi 17y ago
They offer an optional extra feature (paid) that I wasn't expecting: http://www.mypasswordbuddy.com/web/admin/ http://www.mypasswordbuddy.com/web/admin/
EvanK 17y ago
i also love how they're shamelessly stealing their graphics from fallout 3
patrickS 17y ago
Better to use offline password management like Sticky Password. http://www.stickypassword.com http://www.stickypassword.com