Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Dropmyemail's security. Parent comment
IFTTT does the same exact thing for some of their "connectors" services. Maybe you should go after them to.
Where IFTTT fails is that they have not IMO adequately explained just how they store these passwords.
http://www.quora.com/How-does-ifttt-securely-store-passwords...
Don't just read some web article talking about "always hash passwords" and repeat it as mantra. This is good practice for 90% of the time but there are definite use cases where having reversible encryption of passwords is necessary.
There are no comments on this comment yet.
IFTTT does the same exact thing for some of their "connectors" services. Maybe you should go after them to.
Where IFTTT fails is that they have not IMO adequately explained just how they store these passwords.
http://www.quora.com/How-does-ifttt-securely-store-passwords...
Don't just read some web article talking about "always hash passwords" and repeat it as mantra. This is good practice for 90% of the time but there are definite use cases where having reversible encryption of passwords is necessary.