I signed up to Vox to comment on a friend's blog and was immediately disappointed. Why? It turns out they store my chosen password in clear text. Not only are they violating this basic security principle, they seem proud of it too—including my password in the welcome mail they sent me. (This obviously is how I know about their violation of good practice.)
Recent Comments
-
Simon Wistow said:
Actually, we don't store the password in plain text but there was a requirement to have the original be retrievable... read more
on Bad first impression
Oh, I'm sorry about the slander.Does that mean that the passwords are stored encrypted in a way that you can... read more
on Bad first impression