5 ms·
HN - Insecure Password Practices
HN passwords are sent over plain-text HTTP posts during logons and resets. Also, simple passwords such as '1234' are acceptable. As hackers and implementers who should have an interest in security isn't this a bad example to set... especially with all the recent password compromises and the endemic re-use of passwords?
Some wireshark pics here: http://imgur.com/a/69dcm
- spooneybarger 16y agoStrong passwords and https are only needed when: 1) the data being accessed is important. 2) the user reuses credentials. hopefully no one here is doing #2. and i certainly don't consider #1 to be true for me. if someone were to post as me... we'll that sucks but it isn't the end of the world.
- 16s 16y agoIf they posted highly objectionable/obscene content as you, would that not harm your reputation? It's at least a possibility. Reputation is everything.
- spooneybarger 16y agoI'm not particularly worried about that.