News for hackers. Stuff that matters.

A comment on Chrome's insane password security strategy. Parent comment

Re:Chrome's insane password security strategy by nazbot on Wednesday August 07, 2013 @11:39AM (#6173503)
Don't most sites require that you enter your old password before you can change it?
[ Parent | on HN ]
Re:Chrome's insane password security strategy by corobo on Wednesday August 07, 2013 @11:49AM (#6173572)
Indeed, I guess this is a +1 against storing passwords plaintext (well, obtainable in any case) - as a person could change your password and take over the account completely
[ Parent | on HN ]
Re:Chrome's insane password security strategy by taeric on Wednesday August 07, 2013 @01:56PM (#6174408)
Not if you use the "reset" option. Which... you have their email account. So...
[ Parent | on HN ]
Re:Chrome's insane password security strategy by phablet on Wednesday August 07, 2013 @04:04PM (#6175242)
Heh. I wasn't even thinking about the "Forgot your password" feature. Better still.
[ Parent | on HN ]