7 ms·
Accenture built the PRESTO system (payment card for Toronto transit) and of course they store plaintext passwords (https://www.reddit.com/r/toronto/comments/1su
by humblepie 5y ago
Accenture built the PRESTO system (payment card for Toronto transit) and of course they store plaintext passwords (https://www.reddit.com/r/toronto/comments/1subk4/presto_card_system_has_horrible_security/ https://www.reddit.com/r/toronto/comments/1subk4/presto_card...)
- cm2187 5y agoAs I am told very often on HN, security is expensive. It is expensive to use an off the shelves password hashing algorithm, or to use parameterized SQL queries...
- sgt 5y agoYes, in Computer Science, using parameterized SQL queries is considered a Hard Problem™. /s
- perardi 5y agoAnd for a bit of a citation: https://en.wikipedia.org/wiki/Presto_card https://en.wikipedia.org/wiki/Presto_card And from personal experience: Jesus wept, Presto was a truly awful rollout, not least of which was the awful UX/UI of the terminals at the stations. Oh, and of course, in 2021, you still cannot tap-to-pay using NFC on your phone. Now, that may not be Accenture’s fault; that could obviously and easily be the failure of sclerotic Canadian bureaucracy. But I would not be surprised if the back end simply does not support such a thing without another $50 million in consulting fees.