News for hackers. Stuff that matters.

A comment on Newegg stores your password in plaintext. Parent comment

Re:Newegg stores your password in plaintext by tzs on Tuesday May 24, 2011 @11:40PM (#2582751)
> However, stored in plaintext or stored in an encrypted, reversible manner, the password is not stored in what most folks would consider a secure manner

Credit card numbers are stored in a reversible encrypted manner, and that's considered good enough, so one might argue that it is good enough for passwords too since a leaked password is usually not as bad as a leaked credit card number. (I'm not necessarily endorsing that argument--just tossing it out for discussion).

[ Parent | on HN ]
Re:Newegg stores your password in plaintext by Johngibb on Wednesday May 25, 2011 @12:08AM (#2582818)
There are very strict rules for what can be stored about a credit card. Specifically, I'm pretty sure that no one is allowed to store the card verification number. And even just storing a credit card in the first place is highly regulated.

Here's more about PCI compliance: http://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Secu...

[ Parent | on HN ]