3 ms·
While it's important that the passwords aren't stored in plain text, it should be noted that it is also the last line of defense, not the first. There are plent
by Batsu 17y ago
While it's important that the passwords aren't stored in plain text, it should be noted that it is also the last line of defense, not the first. There are plenty of other things to stop you on the way there (not having access to the email, not being able to crack into their data center, the normal stuff).
Just because passwords are in plain text it doesn't mean that suddenly everyone is in trouble.
- jonknee 17y agoOne of the most common ways for data to be stolen is from the inside. Having 500,000 user accounts with plain text passwords is a valuable commodity, all it takes is a pissed off employee and a SELECT email, username, password FROM users INTO OUTFILE '/tmp/users.txt'. Odds are you'd have access to tens of thousands of email addresses and from then on it's easy enough to crack tons of other accounts.
- deleted 17y ago[deleted]
- Batsu 17y agoVery true, and a point I didn't consider.