CDRInfo Forum CDRInfo Forum

Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Photo Gallery  Member List  Search  Calendars  FAQ  Ticket List  Log Out

password and registration   Logged in as: Guest
Viewers: 1281 You can click here to see Today's Posts | Most Active Topics | Posts Since Last Visit
  Printable Version
All Forums >> [In-House] >> Users FeedBack >> password and registration Page: [1]
Login
Message << Older Topic   Newer Topic >>
password and registration - 11/2/2007 9:14:28 AM   
cawpin

 

Posts: 1
Joined: 11/1/2007
Status: offline
I'll be adding this site to the list of sites that I probably won't be using. I registered last night to download a firmware for my DVD writer. During that process i was sent an email to confirm my account. This is standard procedure. After confirmation, however, I was sent another email containing my username AND PASSWORD IN PLAIN TEXT.

This is absolutely ridiculous. First, email is not protected nor encrypted in any way and you sent my password in plain text. Second, my password shouldn't be retrievable at all, by anyone. If it needs to be reset it should be reset to a temporary one and THAT should be sent to me in email and I can then change it to what I want. This is an automated process and isn't hard to set up. In fact it is the default behavior on most forum software which means somebody intentionally changed it to its current behavior.

There is no excuse for this kind of lax security. Whoever runs this forum isn't doing their job. You don't send people's passwords to them, you just DON'T.


< Message edited by cawpin -- 11/2/2007 9:17:36 AM >
Post #: 1
RE: password and registration - 11/2/2007 10:05:59 PM   
MP3Mogul


Posts: 5743
Joined: 4/11/2002
From: Retired Moderator
Status: offline
Number One:  We don't host any firmware for you to download.

Number two:   Your password and username are sent as a "courtesy"

Number three:  MOST sites send usernames and passwords in PLAIN text or HTML.  Even sites that you register and PURCHASE items from.

While we welcome feedback, please try to be constructive, and not flame, as this is "not" proper on "any" message board.

Thread locked, as there is no further need for comment.


< Message edited by MP3Mogul -- 11/2/2007 10:07:54 PM >


_____________________________



LG GSA H22L Firm 1.02
Samsung SH-203N Firm SB01
LiteOn SOHD-16P9S Firm FS0D

(in reply to cawpin)
Post #: 2
Page:   [1]
All Forums >> [In-House] >> Users FeedBack >> password and registration Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts




Forum Software © ASPPlayground.NET Advanced Edition 2.4.5 ANSI

0.031