Are you aware that Github, Twitter, and Facebook also logged passwords?
https://www.zdnet.com/article/github-says-bug-exposed-accoun...
https://arstechnica.com/information-technology/2018/05/twitt...
https://www.theverge.com/2019/3/21/18275837/facebook-plain-t...
Re:Robinhood Stored Passwords in Plaintext
by redleggedfrog on Thursday July 25, 2019 @09:35AM
(#20525222)
You're proving my point. It's not taken seriously enough, even by huge companies with lots of resources.
Re:Robinhood Stored Passwords in Plaintext
by icedchai on Wednesday July 24, 2019 @09:19PM
(#20521796)
I appreciate their transparency. It should make you trust them more because they're letting you know about the problem.
Some organizations would simply ignore this and move on. You'd never know it even happened.
Re:Robinhood Stored Passwords in Plaintext
by redleggedfrog on Wednesday July 24, 2019 @09:39PM
(#20521882)
I'll admit, that's a good point that made me go, "Hmmm."
Re:Robinhood Stored Passwords in Plaintext
by devinjflick on Thursday July 25, 2019 @12:56PM
(#20527082)
Blameless post-mortems are a thing for a reason. Honesty about mistakes should make you trust an individual/company more not less.
Just my 2 c
I guess that's where you and I differ. There are certain mistakes that are tolerable. But ones that result in mass emailing to your clients that they need to change their passwords are not. I'd never heard of robinhood.com before, but now I have, and my impression is I'd never trust them because they have staff that makes mistakes with my secure information.
Think of how robinhood.com's employees feel about this. Management, and the people who are now watching the fallout rob the company of revenue.
Telling me that the person who made that mistake is gone might make me think differently.
The minute you start taking users name and passwords you're in the big boy world and need to treat it as such. Mistakes can be fatal, not just for your job, but your company.