JPDev@programming.dev to Software Gore@programming.dev · 1年前Password must match the followingprogramming.devimagemessage-square50fedilinkarrow-up1433
arrow-up1433imagePassword must match the followingprogramming.devJPDev@programming.dev to Software Gore@programming.dev · 1年前message-square50fedilink
minus-squareAggressivelyPassive@feddit.delinkfedilinkarrow-up17·1年前We have a system that mails your password if you change it. It’s just for internal users, but still.
minus-squareMonument@lemmy.sdf.orglinkfedilinkEnglisharrow-up13·1年前That means those suckers are either stored plaintext or stored with decryption key that is somewhere within the server. Yeesh.
minus-squareTja@programming.devlinkfedilinkarrow-up11·1年前“if you change it”. It might send the email before storing it as a salted hash in the DB. Unlikely, but possible.
We have a system that mails your password if you change it. It’s just for internal users, but still.
That means those suckers are either stored plaintext or stored with decryption key that is somewhere within the server. Yeesh.
“if you change it”. It might send the email before storing it as a salted hash in the DB. Unlikely, but possible.