2 ms·
If you read the question it isn't clear that they actually store passwords in plaintext, they might of sent it along with the welcome email prior to hashing it.
by willcipriano 5y ago
If you read the question it isn't clear that they actually store passwords in plaintext, they might of sent it along with the welcome email prior to hashing it.
- Crosseye_Jack 5y agoThe person said they did a "forgotten password" route and got part of their password as a hint. Even if they are hashing the full password, they still have part of the password stored somewhere for that to happen. > I immediately tried to change my password while logged in, but found that I could not even change the password I initially created. I logged out, and chose the "Forgot Password" option, hoping my password would reset and allow me to set a different one. Instead, the "Forgot Password" option only showed me a password hint (i.e. the last 4 characters of my actual password). The site said that if I needed any other password help to please send them an email. Someone had the fun idea of googling the owner info, tapping the info into the site[0] and well breaking the Computer Misuse Act to show them how much of a bad idea it is. [0] https://i.imgur.com/WzKLH8C.png https://i.imgur.com/WzKLH8C.png