Learn More
Resend Email
18
Moicanos
8y

sometimes our application users can't login to our application and they report the problem to us. The fucking problem? Almost sure they forgot the password because we can login with their account.. Yeah we should not have access to their password, but we do xD. The worst is they send a Word file with only a print screen of the application error saying they can't login. Why not a .jpg??! The word takes 4 seconds to open

undefined
Favorite
Ranter
Comments
  • 9
    8y
    Never understood slapping a screenshot in a word document, but it seems quite common.
  • 0
    8y
    @Letmecode I'm assuming the OP stores them in a password manager like lastpass.
  • 6
    8y
    This is wrong on so many levels
  • 7
    8y
    @Letmecode I find it hard to believe anyone would be stupid enough to store unhashed passwords in their application.
  • 2
    8y
    just to be more clear about our access to passwords. It is a big application for a commercial company. I just recently joined the team. We can see the passwords in the servers logs, for change password requests.
  • 7
    8y
    @Moicanos Oh, that's a big problem then.
  • 2
    8y
    @Moicanos But surely the actual password shouldn't be logged?
  • 2
    8y
    @PiranhaGeorge, @ToshNeox yeah.. If this was the only problem this project has I would be happy. I will work a few more months in this and then get out. It is my first job, I didn't know how it was before I accepted it.
  • 4
    8y
    Client of ours likes to print out an excel dump of their database table, doddle some notes on that, then scan it back in and send it to us in some HP format i can't easily open.. Bug reports? No screenshots, no username, and they've already corrected the data they thought was wrong in the DB...

    Give me Word over that. ;)
  • 4
    8y
    @arminiae actually a rant by itself! You, sir, wasted upvotes 😂
  • 0
    8y
    @Moicanos I'd weigh up whether it would be better for your skills/sanity to leave, or try and get it all fixed and then have more to show off (i.e. be able to show your boss you fixed loads of stuff (also show the benefit of added security with hashed passwords etc.), then you can ask for more money! 😀
  • 0
    8y
    I have seen a case where passwords got encrypted with passports in sql and you could actually decode them. also on a university they store them as plain text. 😞
  • 0
    8y
    @Lisanna yes plaintext
devRant © 2021 Hexical Labs LLC
Privacy Policy  |  Terms of Service
Add Comment