Starbucks caught storing mobile passwords in clear text

Re:Starbucks caught storing mobile passwords in clear text by jessaustin on Thursday January 16, 2014 @11:08AM (#7070127)

So are passwords broken or not? (Hint: they are.) You can't use the inherent drawbacks of passwords as an excuse for introducing even more vulns.

ISTM the location data is stored client-side not because of some wise decision to spread data out (and then what, include it as query data in future reqs to the server?) but rather because their error handling module wasn't configured.

[ Parent | on HN ]

Re:Starbucks caught storing mobile passwords in clear text by brudgers on Thursday January 16, 2014 @11:24AM (#7070260)

The greater vulnerability may be exposing all passwords to a single attack. The non-centralized redundant nature of the internet is a loose analogy. My server may go down, and it will suck for me, but it doesn't necessarily increase the risk to your server.

[ Parent | on HN ]