9 ms·
I still dont get how you concluded that Newegg stores password in plain text. All you did was talk to a Newegg rep, you said he mis understood you and email yo
by radioactive21 15y ago
I still dont get how you concluded that Newegg stores password in plain text.
All you did was talk to a Newegg rep, you said he mis understood you and email you your Newegg password. What evidence do you have and in what logical reasoning does that lead to Newegg storing passwords in plain text?
He could have used your info and looked it up in the Newegg system, probably clicked a check box that says "email password" the system could have decrypted it and sent you the password.
I've seen many sites that actually send you your username and current passwords if you forgot. It doesn't mean that when it's stored on their system it was not encrypted.
Edit: to clarify, my whole point is in reference to how the password is stored in plain text.
- grantg 15y agoEncryption is inadequate because others can still find out what your password was (Insert disgruntled employee or hacker that gets the master decyption key). Hashing / SALTing is WAAAAAY safer.
- yid 15y agoIf your password is stored in a "decryptable" format, it might as well be stored in plaintext. Secure systems simply do not have this capability.
- loganlinn 15y agoIf a system can easily decrypt a password, the programmer that made the system (or just someone looking at the source) can easily access your password.
- lurker19 15y agoYou may as well say that passwords are always encrypted into ASCII code. The difference between encoding and encrypting has only to do with the difficulty of recovering plaintext. If there is no difference, there is no difference.