tonkatwuck

@tonkatwuck@lemmynsfw.com

Profil ze zdalnego serwera może być niekompletny. Zobacz więcej na oryginalnej instancji.

tonkatwuck,

It’s possible that this email is a result of forum user creation, so during that submission the plaintext password was available to send to the user. Then it would be hashed and stored.

tonkatwuck,

I’m just explaining how user authentication works for most web applications. The server will process your plaintext password when your account is created. It should then store that as a hashed string, but it can ALSO send out an email with that plaintext password to the user describing their account creation. This post does not identify that passwords are stored in plaintext, it just identifies that they email plaintext passwords which is poor security practice.

  • Wszystkie
  • Subskrybowane
  • Moderowane
  • Ulubione
  • Spoleczenstwo
  • sport
  • nauka
  • muzyka
  • rowery
  • giereczkowo
  • FromSilesiaToPolesia
  • esport
  • lieratura
  • Blogi
  • Pozytywnie
  • krakow
  • slask
  • fediversum
  • niusy
  • Cyfryzacja
  • tech
  • kino
  • LGBTQIAP
  • opowiadania
  • Psychologia
  • motoryzacja
  • turystyka
  • MiddleEast
  • zebynieucieklo
  • test1
  • Archiwum
  • NomadOffgrid
  • Wszystkie magazyny