ckc:
Gamepass has apps on XBMC and Plex. It's not that people won't develop them for PLP, because God knows there's enough people in other countries signing up to it too. It's just that PLP won't let anyone.

raspygold: I know isn't really on topic, but thought I would share my concerns.


I just had an issue logging into their system, so I thought I'd reset my password. From the sign in page I clicked "Retrieve my password"



I entered in my email address and I got a nice little message saying saying that my request had been sent – great!



I opened up my email and looked for the email and there it was. My password in all of its plain text glory:



Which makes me wonder how they are storing passwords! They're obviously either stored in plain text or using some reversible "encryption". 

samsmith:

raspygold: I know isn't really on topic, but thought I would share my concerns.


I just had an issue logging into their system, so I thought I'd reset my password. From the sign in page I clicked "Retrieve my password"



I entered in my email address and I got a nice little message saying saying that my request had been sent – great!



I opened up my email and looked for the email and there it was. My password in all of its plain text glory:



Which makes me wonder how they are storing passwords! They're obviously either stored in plain text or using some reversible "encryption". 

You're concerned that the password retrieval system is working?

samsmith:

raspygold: I know isn't really on topic, but thought I would share my concerns.


I just had an issue logging into their system, so I thought I'd reset my password. From the sign in page I clicked "Retrieve my password"



I entered in my email address and I got a nice little message saying saying that my request had been sent – great!



I opened up my email and looked for the email and there it was. My password in all of its plain text glory:



Which makes me wonder how they are storing passwords! They're obviously either stored in plain text or using some reversible "encryption". 

You're concerned that the password retrieval system is working?

StarBlazer:

samsmith:

raspygold: I know isn't really on topic, but thought I would share my concerns.


I just had an issue logging into their system, so I thought I'd reset my password. From the sign in page I clicked "Retrieve my password"



I entered in my email address and I got a nice little message saying saying that my request had been sent – great!



I opened up my email and looked for the email and there it was. My password in all of its plain text glory:



Which makes me wonder how they are storing passwords! They're obviously either stored in plain text or using some reversible "encryption". 

You're concerned that the password retrieval system is working?

Have they reset your password and sent that as plain text or have they actually sent your password as it was set on the system?  If the former then I wouldn't worry, if the latter then I would be concerned also as someone seeing your password could use it to estimate other passwords that you might use.

Strong encryption does not need to be irreversible.

samsmith:

raspygold: I know isn't really on topic, but thought I would share my concerns.


I just had an issue logging into their system, so I thought I'd reset my password. From the sign in page I clicked "Retrieve my password"



I entered in my email address and I got a nice little message saying saying that my request had been sent – great!



I opened up my email and looked for the email and there it was. My password in all of its plain text glory:



Which makes me wonder how they are storing passwords! They're obviously either stored in plain text or using some reversible "encryption". 

You're concerned that the password retrieval system is working?

MarkCerny: I think what's more surprising is you password lol

raspygold:

MarkCerny: I think what's more surprising is you password lol

Yeah, obviously not my real password or email =)

samsmith:

raspygold:

MarkCerny: I think what's more surprising is you password lol

Yeah, obviously not my real password or email =)

Issue has been raised with PLP developers, more on this soon.

raspygold:

samsmith:

raspygold:

MarkCerny: I think what's more surprising is you password lol

Yeah, obviously not my real password or email =)

Issue has been raised with PLP developers, more on this soon.

I did talk to someone via live chat, but they just pointed me to the privacy policy and didn't seem overly concerned.