2 ms·

Newegg has earned my trust - in my book they can do whatever they want. If they leak my info, then I'll care.

• gabbo 15y ago
  Leak? Your comment only really makes sense if you trust all current and future Newegg employees to (1) never make mistakes with security impact (2) be completely incorruptible. This article strikes down (1) almost by definition.
  • PhrosTT 15y ago
    You seem to imply the employees have access to the password as was discussed above at length. This has not been proven. My passwords are unique - If my newegg password is compromised I supposed people can order some computer parts and ship them to one of my addresses. Pretty sure changing delivery address of stored CC requires card info re-entry like amazon. And I'd just report it stolen and get re-imbursed. BFD.
• r00fus 15y ago
  Perhaps they've leaked your info and you don't know. Hell, perhaps they don't even know. If the password isn't hashed (ie, 1-way function) and is retrievable by a support rep, then it's ripe for the picking (social engineering is a very well known and effective intrusion tactic). This is not to say that NewEgg is not to be trusted. I would just assume that whatever password you gave them is potentially already compromised. Password generators/storage mechanisms like 1Password or KeepassX are very useful here. I just generate a large random password for each site.