News for hackers. Stuff that matters.

A comment on Newegg stores your password in plaintext. Parent comment

Re:Newegg stores your password in plaintext by jerhinesmith on Tuesday May 24, 2011 @08:19PM (#2582318)
Ah, yes, that makes sense. I was considering the case where the attacker simply wants access to your account on 'compromised system x' -- not where they're simply using 'compromised system x' as a conduit for obtaining your password (in the hopes that it's used elsewhere across the web).

Thanks!

[ Parent | on HN ]
Re:Newegg stores your password in plaintext by Johngibb on Wednesday May 25, 2011 @12:12AM (#2582824)
The other issue is that the former can be done without the affected user knowing it. If a attacker resets your password, you're going to know right away when you can't log in.
[ Parent | on HN ]