I'll be adding this site to the list of sites that I probably won't be using. I registered last night to download a firmware for my DVD writer. During that process i was sent an email to confirm my account. This is standard procedure. After confirmation, however, I was sent another email containing my username AND PASSWORD IN PLAIN TEXT.

This is absolutely ridiculous. First, email is not protected nor encrypted in any way and you sent my password in plain text. Second, my password shouldn't be retrievable at all, by anyone. If it needs to be reset it should be reset to a temporary one and THAT should be sent to me in email and I can then change it to what I want. This is an automated process and isn't hard to set up. In fact it is the default behavior on most forum software which means somebody intentionally changed it to its current behavior.

There is no excuse for this kind of lax security. Whoever runs this forum isn't doing their job. You don't send people's passwords to them, you just DON'T.

Number One:  We don't host any firmware for you to download.

Number two:   Your password and username are sent as a "courtesy"

Number three:  MOST sites send usernames and passwords in PLAIN text or HTML.  Even sites that you register and PURCHASE items from.

While we welcome feedback, please try to be constructive, and not flame, as this is "not" proper on "any" message board.

Thread locked, as there is no further need for comment.

(in reply to cawpin)