News for hackers. Stuff that matters.

A comment on Bad Security at Evite. Parent comment

Re:Bad Security at Evite by laut on Saturday February 28, 2009 @03:47PM (#498471)
I agree that storing passwords in plaintext is an anti pattern. But with a one-way-password-encryption setup you need a password resetting system, which is more than 5-10 lines of code.
[ Parent | on HN ]
Re:Bad Security at Evite by tptacek on Saturday February 28, 2009 @04:33PM (#498501)
You need many of those same lines of code to do password recovery if you store plaintext.
[ Parent | on HN ]