News for hackers. Stuff that matters.

A comment on The Correct Way to Validate Email Addresses. Parent comment

Re:The Correct Way to Validate Email Addresses by Bartweiss on Thursday September 08, 2016 @12:05PM (#12454263)
The concern isn't that there's no way to do it, it's that there's no reason to do it unless the plaintext is going to matter again in the future.

The best guess I've seen is that they might be hashing, but also having people read passwords to customer service reps. That would justify caring about rude plaintext, but it's also a terrible system.

[ Parent | on HN ]
Re:The Correct Way to Validate Email Addresses by billmalarky on Thursday September 08, 2016 @12:36PM (#12454575)
Heh, to be fair, we are talking about a company with millions of customers that is consistently rated as "most hated" by consumers. I'd be surprised if a decent percentage of attempted passwords weren't "fuck time warner"...
[ Parent | on HN ]
Re:The Correct Way to Validate Email Addresses by Bartweiss on Thursday September 08, 2016 @02:37PM (#12455894)
Hah. I can see some poor support rep getting a dozen calls a day with insulting passwords, actually - maybe it's about reducing call center turnover...
[ Parent | on HN ]