Comment

Comment on OP finds vulnerability where a forum sends you your password in plaintext over email and everyone misses the forest for the trees

MajorHavoc@lemmy.world ⁨1⁩ ⁨year⁩ ago

Using “we use a reversible hash” to claim “we don’t store passwords in plain text” is the “corn syrup is not sugar” of the cybersecurity world.

It’s technically correct, while also a bald faced lie.

Sort:hotnew top

poopsmith@lemmy.world ⁨1⁩ ⁨year⁩ ago
Not sure what you mean here, this is what the forum post said:

After emailing (admittedly not current best practice), the passwords are hashed and only the hash is stored.

source