14

I don't understand how is possible that programmers today are developing applications that are storing plain password in the database.

I know it's kinda boring topic since everybody here is talking about it this week, but it's really confusing to me.

Every now and then some DB gets hacked, millions of passwords are leaked and then you have developers, who should be smart and logical people, who decide to do that.

Ok, maybe the project deadline was close or something similar, but I think there is no excuse for something like that. No matter how close or behind deadline project is, you should always be able to explain to your boss/client what could happen.

Comments
  • 2
    How hard is it to hash it and salt it?
  • 2
    Well, people here on devrant and at most communities and forums you visit are the once who actually like and care about code and how things should work. But when you look at how many developers are out there - specially from India and other Asian countries who don't care about the job and are here only because of "opportunities" and will do just the minimum to get by, probably because they don't know any better and are simply not interested. It isn't hard to see bad code everywhere out there.
  • 0
    I remember just joining a company which "specialises" in bespoke e-commerce sites 12 years ago. I was shocked to see their user passwords and credit card details were not encrypted on the database at the time.
Add Comment