News for hackers. Stuff that matters.

A comment on Newegg stores your password in plaintext. Parent comment

Re:Newegg stores your password in plaintext by elithrar on Tuesday May 24, 2011 @08:57PM (#2582425)
> When we're talking about passwords "vaulted" in non-exposed systems used for customer support, I have a harder time getting upset about it. I don't like systems that work this way, but I see the support/security tradeoff and it's a valid one.

Worth also knowing is that many ISP's store your password using reversible encryption, because if a customer calls up wanting to know their password, it doesn't have to be regenerated. Which can save a lot of time re-configuring modem PPP credentials with your average Joe.

[ Parent | on HN ]
Re:Newegg stores your password in plaintext by dfox on Wednesday May 25, 2011 @05:52AM (#2583440)
ISPs providing any kind of authenticated PPP store your password in cleartext, because PPP authentication does not work without storing cleartext passwords.
[ Parent | on HN ]
Re:Newegg stores your password in plaintext by tptacek on Wednesday May 25, 2011 @08:17AM (#2583687)
PAP doesn't require the server to store cleartext passwords.
[ Parent | on HN ]
Re:Newegg stores your password in plaintext by sdkmvx on Tuesday May 24, 2011 @09:04PM (#2582441)
If a customer calls up wanting to know their password, I would bet that they are configuring a new modem and that's why the need it. If their modem knows the password, why do they need to know it?
[ Parent | on HN ]
Re:Newegg stores your password in plaintext by trafficlight on Tuesday May 24, 2011 @09:17PM (#2582484)
Email, ftp access, ssh access. There are lots of other reasons for needing to know a password.
[ Parent | on HN ]
Re:Newegg stores your password in plaintext by lurker19 on Wednesday May 25, 2011 @02:10AM (#2583090)
I think elithrar was talking about the layer-2 modem password, not the layer-7 application user credentials.
[ Parent | on HN ]
Re:Newegg stores your password in plaintext by rmc on Wednesday May 25, 2011 @05:05AM (#2583383)
What makes you think they are different?
[ Parent | on HN ]