10 ms·
That list is very out of date. One of my clients appears on there and when we took over in 2012 we encrypted all their user credentials.
by invisiblea 8y ago
That list is very out of date. One of my clients appears on there and when we took over in 2012 we encrypted all their user credentials.
- ygra 8y agoEncrypting passwords isn't really much better, though, is it? It's still reversible as there has to be a key somewhere.
- whyever 8y agoTheir FAQ [1, 2] suggests that using an encrypted password still warrants an entry. [1] http://plaintextoffenders.com/faq/devs http://plaintextoffenders.com/faq/devs [2] http://plaintextoffenders.com/faq/non-devs http://plaintextoffenders.com/faq/non-devs
- bausshf 8y agoWell you took over and did a terrible job. Hash passwords, not encrypt. An encryption is reversible, a hash result isn't.