Plain Text Offenders

#1

Post by definetheword » Wed, Nov 25, 2020, 4:14 PM UTC

Plain Text Offenders
plaintextoffenders.com

Re: Plain Text Offenders

#2

Post by jraph » Wed, Nov 25, 2020, 5:40 PM UTC

quick description: it's a list of screenshots of emails containing plain text passwords (often emailed back).

Re: Plain Text Offenders

#3

Post by kevincox » Wed, Nov 25, 2020, 6:28 PM UTC

To be absolutely pedantic including the password in the signup email doesn't mean that they are storing it in plain text as they could have just generated the email then thrown away the password.

However I would bet that frequently they do, frequently the emails are logged for a substantial period of time and it isn't a best practice anyways.

Re: Plain Text Offenders

#4

Post by loopback_device » Wed, Nov 25, 2020, 7:53 PM UTC

kevincox wrote: post #3

To be absolutely pedantic including the password in the signup email doesn't mean that they are storing it in plain text as they could have just generated the email then thrown away the password. However I would bet that frequently they do, frequently the emails are logged for a substantial period of time and it isn't a best practice anyways.

Considering that emails fly through a bunch of MTAs and also occasionally aren't transmitted via TLS, none of it matters, your password is public by the time you see the email