Maybe https://www.plus.net/ should be next. Reported few times without any result.
Report for what? Storing plain text passwords?
Reported to them that it's not a good idea.
Knuddels: Chat platform must pay after hacker attack fine
121–125 of 125 posts
Re: Knuddels: Chat platform must pay after hacker attack fine
#122Full list of 5000+ websites that store their passwords in plain text: https://github.com/plaintextoffenders/plaintextoffenders/blo...
That list is very out of date. One of my clients appears on there and when we took over in 2012 we encrypted all their user credentials.
Well you took over and did a terrible job.
Hash passwords, not encrypt.
An encryption is reversible, a hash result isn't.
Re: Knuddels: Chat platform must pay after hacker attack fine
#123Earlier quoted context omitted.
This requirement is technically fulfilled by encrypting transmissions with TLS and storage with disk encryption like LUKS or Veracrypt. It does not really say anything about password hashing.
The screenshot shows that the plaintext password was sent over SMTP. So it isn't meeting that bar either.
What makes you think it's SMTP and not SMTPS?
Re: Knuddels: Chat platform must pay after hacker attack fine
#124Funny to speak about security and a GDPR fine for a website that hasn't HTTPS activated...
I don't see much reason why their website should have HTTPS though.
There are no input fields, no requests sent with personal information at all etc.
Everything that's questionable already comes over HTTPS on their site though, like Facebook content etc.