legatou

3 ms·

1. 1.▲
   by legatou 13y ago

   If they have the decryption keys, that's the same as storing the password in plaintext. I don't know how common it is, but I know it's insecure.
2. 2.▲
   by legatou 13y ago

   In order to validate that my 16-char truncated password is correct, they would have to have my password stored somewhere. Standard security practice is to store ONLY the hash of a password, and never the password text.
3. 3.▲
   by legatou 13y ago

   I must admit, as a software dev I'm quite distressed that this is what I was prompted with when I tried to login to my email today.
4. 4.▲
   Microsoft Outlook (hotmail) doesn't hash passwords?(imgur.com)

   1 points by legatou 13y ago|8 comments