from here (found using a google search) |
this tweet inspired me to go looking for the actual page where ING is apparently offering to send you your password by snail mail, but i couldn't find it. i did find others, though. any site that offers to send you your password rather than a new password is not storing your password safely. if it were hashed there'd be no way to get the original password back out.
0 comments:
Post a Comment