3 ms·
Granted, a lot of this discussion is pedantic. Devil's advocate: why is it pedantry to ask for security alarms to be precise? We ask for e.g. the TSA to be pre
by runako 14y ago
Granted, a lot of this discussion is pedantic.
Devil's advocate: why is it pedantry to ask for security alarms to be precise? We ask for e.g. the TSA to be precise about what it needs, should not computer security professionals be held to the same bar? Making bogus claims about a system's vulnerability (be it shoes at airports or passwords) damages the credibility of the next security alarm.
Note: I'm not defending the practice of sending passwords in the clear. But I don't think it's too much to ask for security professionals to make precise claims, when doing so is a 5-second op.
- EvanAnderson 14y agoThe pedantry that's irritating me is this argument about there somehow being a "safe" way to store the plaintext-equivalent version of a password (there isn't) or even that there is somehow a need to do so (there isn't). I agree that the Plain-Text Offenders site should state this plainly.
- omervk 14y agoWe are. http://plaintextoffenders.com/about http://plaintextoffenders.com/about
- marshray 14y agoThat's a nice little write-up, I think it would be great on the main page. I didn't look for it under "About" because I'm used to that being for personal details about the project's people rather than intro or summary info.