Re:Discover.com stores passwords in clear text
by MichaelStubbs on Thursday July 14, 2011 @02:53PM
(#2764438)
>Good thing it's a one-off that I think they generated for me
Is that really a good thing? If they can't store it properly, what are the chances of them generating it properly?
Re:Discover.com stores passwords in clear text
by pavel_lishin on Thursday July 14, 2011 @03:10PM
(#2764531)
Well, it's not great - I actually just changed it, but the generated password was "3PTJJV7". Not too awful, aside from the length, which has a maximum of 10 characters and doesn't allow special characters.
It also asked me to confirm my new username and password, helpfully showing me my username and asterisks for the password. :/
Good thing it's a one-off that I think they generated for me (it's too short for it to have come from LastPass.)
I imagine this was done on purpose so that when grandma types "goodkitty" instead of "GoodKitty", she doesn't get confused by the website's refusal to let her in. From a usability perspective - for the majority of customers who don't use password utilities like 1Password - it makes sense.