3 ms·
Am I the only person that thinks that as bad as storing a plaintext password is, sending it out in an email (an unprotected communication channel) is about twic
by brown9-2 16y ago
Am I the only person that thinks that as bad as storing a plaintext password is, sending it out in an email (an unprotected communication channel) is about twice as bad of a security problem?
- anthonyb 16y agoThey're both bad, but it's more work to intercept email. I would imagine most hackers will want to break into the core system and download a bajillion passwords all at once.
- brown9-2 16y agoIt's more work if you're targeting a single user with the intent to steal their PoF password. But it's a lot less work if you already have access to the email account or server, or any server that the email message passes through - now you suddenly have a user's credentials, for free.
- uptown 16y agoNot to mention the potential for creating other problems. Say you've started dating somebody that doesn't use POF or know the site does this, and they notice you're getting emails from a dating site to remind you of your password. All of a sudden you need to make them understand that you're not actively using the dating site.