Learn More
Resend Email
25
FrozenDroid
7y

When you find out your password is unencrypted.

undefined
Favorite
Ranter
Comments
  • 15
    7y
    This is a headline waiting to break "all password data stolen from Aviva, a spokesperson said 'all customers are screwed'"
  • 18
    7y
    Passwords should never be encrypted. They should be salted and hashed. A bit of a nitpick I guess.
  • 6
    7y
    So who wants to bet they also don't validate their inputs and don't use prepared statements?
  • 5
    7y
    @iguana Oh, yeah, you're right. Don't know why I said encrypted! That's a bad idea when it comes to storing passwords.
  • 1
    7y
    Can't help but think this also means they're using string concatenation to build the insert sql, which is an injection waiting to happen
  • 0
    7y
    Unfortunately even some big finance companies store passwords unencrypted ...
devRant © 2021 Hexical Labs LLC
Privacy Policy  |  Terms of Service
Add Comment