4 ms·
Three years ago when I was learning web development, I noticed McDelivery in India stores the plaintext password for each user — and it's still the same . I kn
by r_singh 10y ago
Three years ago when I was learning web development, I noticed McDelivery in India stores the plaintext password for each user — and it's still the same .
I know this because you can recover your password from them in plaintext. I find it hard to believe.
- r_singh 10y agoDoes anyone know about more apis in India that are so porous?
- anilgulecha 10y agoYes, Axis Bank's MF. I made a full-disclosure here (plaintext passwords). https://medium.com/@anilgulecha/axismf-coms-bad-security-practice-c9a1cb60110 https://medium.com/@anilgulecha/axismf-coms-bad-security-pra...