3 ms·
It appears a lot of people have already warned Schwab about this. Sadly, I expect it will change only if there was some embarrassing large scale attack that is
by colinbartlett 12y ago
It appears a lot of people have already warned Schwab about this.
Sadly, I expect it will change only if there was some embarrassing large scale attack that is subsequently publicized.
- thrownaway2424 12y agoHow would such large scale attack be perpetrated? The worst you could do would be to lock out a lot of accounts.
- cddotdotslash 12y agoIf someone managed to steal a database of credentials from Schwab, they could possibly decrypt the passwords (all these limitations clearly point to them not hashing properly). If someone stole a database from a provider that implements passwords correctly, the best they could do is get some low-hanging fruit passwords.