News for hackers. Stuff that matters.

A comment on The “Cobra Effect” that is disabling paste on password fields. Parent comment

Re:The “Cobra Effect” that is disabling paste on password fi... by twic on Sunday June 26, 2016 @05:32AM (#11980032)
The Co-operative Bank does this too. They absolutely store the password in plain text, because if you phone up, you have to tell the whole thing to the phone operator.

To be fair, they're right in the middle of rolling out a new banking site which I think has proper passwords. The current system is a holdover from when they only had phone banking.

[ Parent | on HN ]
Re:The “Cobra Effect” that is disabling paste on password fi... by tamana on Sunday June 26, 2016 @02:26PM (#11981959)
That does not mean they store plaintext passwords. When you login to most any website you have to submit your whole password. It is usually hashed and the hash is compare to the stored hashed pasword
[ Parent | on HN ]
Re:The “Cobra Effect” that is disabling paste on password fi... by twic on Monday June 27, 2016 @03:45PM (#11988910)
From my conversations with the telephone banking operators, it's clear that they have the plaintext password in front of them.
[ Parent | on HN ]