News for hackers. Stuff that matters.

stitchintime

stitchintime on Hacker News

Tell HN: Stitcher does not encrypt users' passwords

Posted by stitchintime on Tuesday May 28, 2013 @12:27PM
from the self-post dept.

Stitcher (the podcast app) actually stores passwords in plaintext.They have had millions of dollars and a number of years to fix this, but their leadership refused to prioritize the day or so of work it would take to implement the most basic protections for the users who trust them.I just want this to be well-enough known that they get the shame they have chosen for themselves, so that future...

( Read More... | 4 comments | 17 points | on HN )
Re:Ask HN: Am I committing career suicide? on Tuesday May 28, 2013 @12:24PM (#5780930)
I guess you can start by living in one of a three-bed apt. in Sunnyvale!
Re:Stitcher (podcast app) does not encrypt user passwords on Tuesday May 28, 2013 @02:52AM (#5778557)
I am hoping that this gets enough attention to shame them into better protecting their users. They have gone through millions and millions of dollars and have not taken the most basic steps towards protecting the people who trust them. Can we show Stitcher this is not OK?
Re:Ask HN: Am I committing career suicide? on Tuesday May 28, 2013 @02:17AM (#5778417)
Not sure if this is a popular sentiment, but the Bay Area is expensive. I would probably move to a cheaper area for a while if I wanted to work on cool stuff on my own for a while without taking a nice salary.
Re:How crackers ransack passwords like “qeadzcwrsfxv1331” on Tuesday May 28, 2013 @02:14AM (#5778412)
Related: Stitcher (still) stores passwords in plain text https://news.ycombinator.com/item?id=5778367
Re:Philadelphia: The City of Unbrotherly Love on Tuesday May 28, 2013 @02:06AM (#5778388)
Tiny, tiny, condensed font = nearly unreadable.
Re:Ask HN: Am I committing career suicide? on Tuesday May 28, 2013 @02:05AM (#5778382)
You're definitely not crazy. I am not as far into my own career as you, but I would even say that it seems the crazy thing to do, in your position, is to do nothing. You want more from life? Get it! You will be able to find a job later, guaranteed, especially if you kept hacking after leaving your big-co job! (Do re-adjust expectations, though. A start-up will not pay you nearly as much as your last job did, although you should get stock. You know all this, but it will still be a big change.)