News for hackers. Stuff that matters.

A comment on Discover.com stores passwords in clear text. Parent comment

Re:Discover.com stores passwords in clear text by MichaelStubbs on Thursday July 14, 2011 @02:53PM (#2764438)
>Good thing it's a one-off that I think they generated for me

Is that really a good thing? If they can't store it properly, what are the chances of them generating it properly?

[ Parent | on HN ]
Re:Discover.com stores passwords in clear text by pavel_lishin on Thursday July 14, 2011 @03:10PM (#2764531)
Well, it's not great - I actually just changed it, but the generated password was "3PTJJV7". Not too awful, aside from the length, which has a maximum of 10 characters and doesn't allow special characters.

It also asked me to confirm my new username and password, helpfully showing me my username and asterisks for the password. :/

[ Parent | on HN ]