Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




2604 posts

Uber Geek
+1 received by user: 617


Topic # 111367 31-Oct-2012 21:26
Send private message

Hi

I'm unsure if any other readers have come across the "Valued Opinions" website; basically you earn some form of credit for completing surveys. Now, I went ahead and created an account on the site with an awareness of the degree of information such a site ends up collecting on an individual, but I was surprised by one key thing - the password I entered was included in the email that confirmed my membership.

How kosher is this practice? I understand the risks inherent in sending such sensitive information over an insecure form such as email, but does this also necessarily mean that the password itself hasn't been stored encrypted?

Cheers
Jonathan

Create new topic
1494 posts

Uber Geek
+1 received by user: 221

Subscriber

  Reply # 710082 31-Oct-2012 21:45
Send private message

It doesnt mean its not encrypted, but encryption is reversible hashing is meant to be irreversible, and it doesnt mean that hasnt occured. Before they hash and save a password they can hold that variable to use in the email, and then discard it. You are right, it is poor practice but we can only speculate on their security measures...

1350 posts

Uber Geek
+1 received by user: 15


  Reply # 710110 31-Oct-2012 22:21
Send private message

Having just signed up and then followed the "Forgotten my password link"

I can confirm my password was sent to me in the email so either they are storing passwords in plain text or reversible encryption.

Either one is shocking security practice and I would delete your account or at the very least change your password.

Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Chow brothers plan to invest NZ$100 million in technology
Posted 24-Sep-2017 16:24


Symantec protects data everywhere with Information Centric Security
Posted 21-Sep-2017 15:33


FUJIFILM introduces X-E3 mirrorless camera with wireless connectivity
Posted 18-Sep-2017 13:53


Vodafone announces new plans with bigger data bundles
Posted 15-Sep-2017 10:51


Skinny launches phone with support for te reo Maori
Posted 14-Sep-2017 08:39


If Vodafone dropping mail worries you, you’re doing online wrong
Posted 11-Sep-2017 13:54


Vodafone New Zealand deploy live 400 gigabit system
Posted 11-Sep-2017 11:07


OPPO camera phones now available at PB Tech
Posted 11-Sep-2017 09:56


Norton Wi-Fi Privacy — Easy, flawed VPN
Posted 11-Sep-2017 09:48


Lenovo reveals new ThinkPad A Series
Posted 8-Sep-2017 14:37


Huawei passes Apple for the first time to capture the second spot globally
Posted 8-Sep-2017 10:45


Vodafone initiative enhances te reo Maori pronunciation on Google Maps
Posted 8-Sep-2017 10:40


Voyager Internet expand local internet phone services company with Conversant acquisition
Posted 6-Sep-2017 18:27


NOW Expands in to Tauranga
Posted 5-Sep-2017 18:16


Windows 10 Fall Creators Update coming Oct. 17
Posted 4-Sep-2017 14:10



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.