Forum Moderators: open
Message Too Old, No Replies
Security issue when joining this site
Hi there,
I've just created an account here, and experienced an issue that illustrates how long this site has been around for (I may have been a member many years ago but not sure)
The issue is that the activation email contained my password in clear text.
Would the owners of this site please consider changing this?
This also suggests that passwords are stored in clear text, rather than being encrypted which isn't great, but sending the password in an email is probably more of an issue.
Hi RobinStent and welcome to WebmasterWorld [webmasterworld.com]
You can change your password at any time. That welcome link above offers tips on using the forums' features and settings. If you visit the Control Panel (See dropdown under your profile icon) you can change settings to suit your preferences.
You can change your password at any time.
How does changing your password solve the fact that passwords are stored in plain text?
Hashing and salting passwords are the most basics steps to secure a website.
Here is the OWASP cheat sheet for password storage: [cheatsheetseries.owasp.org...]
This should be a reminder to everyone, not to re-use passwords across multiple websites as you can never be sure that the site owners are being careless with your data.
I remember a few years back that this issue had already surfaced. I thought it was resolved, but appears not.
Ya, it isn't stored in plain text - only sent that one time.
Yes, and update is long long over due.
Yes, and update is long long over due.
::: idly wondering if the site will go UTF-8 before my next milestone birthday ::
Kind of like the way it is! Feels comfy!
Join The Conversation
- Register For Free! - Become a Pro Member!
- See forum categories - Enter the Forum
Moderators and Top Contributors
- Moderator List | Top Contributors:This Week, This Month, Aug, Jul, Archive, Top 100 All Time, Top Voted Members
Hot Threads This Week
