11 ms·
Just yesterday I clicked on the "Forgot Password" link on the AutoTrader.com website. I was expecting a reset link in my email and instead they just emailed me
by drakenot 10y ago
Just yesterday I clicked on the "Forgot Password" link on the AutoTrader.com website. I was expecting a reset link in my email and instead they just emailed me my password in cleartext. This is a huge website! Not some small business. It completely baffles me.
I wish that there was some way to shame these companies. I've seen some websites that list some of these offenders but they don't appear to be effective enough. I want news articles written about these companies in the magazines that the CIOs care about, with their photo right next to the article.
- deleted 10y ago[deleted]
- asadlionpk 10y agoThis seems to be the most popular collection: http://plaintextoffenders.com/ http://plaintextoffenders.com/ There should be a warning in the browser that these websites are known to store password in plaintext. This can be achieved by an extension too.
- nacs 10y ago> This can be achieved by an extension too. In the website you linked, there is a "3rd party tools" link [1] that has a Chrome extension [2] and a Firefox addon [3] that do just that. [1]: http://plaintextoffenders.com/tools http://plaintextoffenders.com/tools [2]: https://chrome.google.com/webstore/detail/plain-text-offenders-aler/ggndaknbenjhnkddgjnjjcmomgaidhmd https://chrome.google.com/webstore/detail/plain-text-offende... [3]: https://addons.mozilla.org/en-US/firefox/addon/plain-text-offenders/ https://addons.mozilla.org/en-US/firefox/addon/plain-text-of...