News for hackers. Stuff that matters.
Re:Can you trust 37signals with your password? by axod on Saturday May 02, 2009 @01:10PM (#590019)
* It's the easiest to code

* The probability of your servers getting hacked/stolen is reasonably low as long as you take other precautions.

For most people, I'd say it's a lot of extra work, for no real pay-off - apart from making your users feel a bit more warm and fuzzy.

A better solution would probably just be a disclaimer on websites saying "Please don't use the same password you use for online banking here, as that would be silly".

Re:Can you trust 37signals with your password? by mihasya on Saturday May 02, 2009 @03:47PM (#590157)
How is using hash passwords "a lot of extra work"? Seriously, what part of that is a lot of work? The password reset feature?
Re:Can you trust 37signals with your password? by axod on Saturday May 02, 2009 @03:51PM (#590164)
Yup, the password reset is extra boring work. Although it is surprising that 37signals haven't done that.