31 ms·
I discovered this a couple of years ago and emailed and got an unsatisfactory response: http://pastebin.com/C745weQ2 http://pastebin.com/C745weQ2 Hopefully th
by bencoder 14y ago
I discovered this a couple of years ago and emailed and got an unsatisfactory response:
http://pastebin.com/C745weQ2 http://pastebin.com/C745weQ2
Hopefully this new attention will have them change the policy.
- codeka 14y agoSo they actually say the passwords are not encrypted in that email, which is quite different to what they say on twitter. I wonder if they're using a reversible encryption now, or (perhaps more likely) they just don't know what they use.
- omh 14y agoThey have a maximum length requirement. That's a red flag which suggests they are just storing it plaintext.