Sites that store plaintext passwords in 2017...

Sounds like horror movie

for a second I thought this was for wk79

there are sites out there that still store password in unsalted MD5/SHA1

@balte I too

... are Christmas for hackers.

Storing plain passwords is childish as fuck in 2k17

can I get the link? just for research purpose

@vidu http://plaintextoffenders.com

@Aitkotw haha 😂

Happening at my job right now. Not considered a priority fix. And would break stuff when fixed. Sigh.

@vidu the one I found in particular is http://kpopmart.com

I know one that does this. And it logs the damn password to console 😑

When we were building a new version of a site from scratch (different account management, different db, different language, etc.), a proposed requirement was that if someone is logged in on the old site they'd be automatically logged in on the new one when they visit. Luckily we managed to unexpect this expectation.