4 ms·
Unless I'm missing something, the CS Rep giving him his password in clear text does not necessarily mean it was stored in clear text.
by evandena 15y ago
Unless I'm missing something, the CS Rep giving him his password in clear text does not necessarily mean it was stored in clear text.
- jackowayed 15y agoNewegg should not be able to determine what his password is. 2-way encryption is less bad than truly storing it in cleartext, but 1-way encryption is the only acceptable way to store a password unless there's some very compelling reason that you need to be able to decrypt it. (eg. I used 2-way encryption to store people's Twitter passwords before OAuth because I needed to be able to tell Twitter their passwords, so 1-way wouldn't work.)
- ori_b 15y agoIf you can get the cleartext of the password without any information outside of what lives on Newegg's servers, then the password is effectively stored in cleartext.