3 ms·
"we noticed that we recorded the password you chose during signup for WordPress.com in plain text" agreed, the wording is 'recorded' not stored which makes m
by bengali3 12y ago
"we noticed that we recorded the password you chose during signup for WordPress.com in plain text"
agreed, the wording is 'recorded' not stored which makes me lean(naively?) towards something like inadvertent logging for example?
ie. plaintext over https through a loadbalancer, with http communication internally, and an internal app logging all its traffic for debugging purposes?
then sometime later: oops, we found some log files with plaintext passwords on our servers.
IDK, just one scenario that might fall under this description