The person said they did a "forgotten password" route and got part of their password as a hint. Even if they are hashing the full password, they still have part

The person said they did a "forgotten password" route and got part of their password as a hint. Even if they are hashing the full password, they still have part of the password stored somewhere for that to happen. > I immediately tried to change my password while logged in, but found that I could not even change the password I initially created. I logged out, and chose the "Forgot Password" option, hoping my password would reset and allow me to set a different one. Instead, the "Forgot Password" option only showed me a password hint (i.e. the last 4 characters of my actual password). The site said that if I needed any other password help to please send them an email. Someone had the fun idea of googling the owner info, tapping the info into the site[0] and well breaking the Computer Misuse Act to show them how much of a bad idea it is. [0] https://i.imgur.com/WzKLH8C.png https://i.imgur.com/WzKLH8C.png