Regulation would be okay... maybe something forbidding the storage of plain-text passwords, special instructions for hashing, a special protocol for (not) stori

Regulation would be okay... maybe something forbidding the storage of plain-text passwords, special instructions for hashing, a special protocol for (not) storing credit card numbers... Like a security 101...