Search found 5 matches

by EricaJoy
Sat Mar 01, 2008 10:19 pm
Forum: Sites & Infrastructure - Feedback/Information
Topic: Forum passwords emailed in plain text
Replies: 9
Views: 772

Re: Forum passwords emailed in plain text

brad wrote:I have never seen an online banking site that uses the persons email address as the login. In any case, thanks for your inputs, I'm still not convinced. We'll see if anyone else feels the same way.
PayPal does actually.
by EricaJoy
Sat Mar 01, 2008 10:03 pm
Forum: Sites & Infrastructure - Feedback/Information
Topic: Forum passwords emailed in plain text
Replies: 9
Views: 772

Re: Forum passwords emailed in plain text

I am still trying to work out how this is all a security risk. I'm open to being convinced, but as yet I am not. It's not like people are storing their banking details on this forum. Gallant registers for the Joomla! forum. Gallant uses the same password that he uses for his online banking account....
by EricaJoy
Sat Mar 01, 2008 8:58 pm
Forum: Sites & Infrastructure - Feedback/Information
Topic: Forum passwords emailed in plain text
Replies: 9
Views: 772

Re: Forum passwords emailed in plain text

This forum uses phpBB, however Joomla has similar behavior. That being said, if users don't take basic security measures, like using different passwords for different online services is that the services problem? Aren't the users to blame here? Yes, but users never behave like they should. I know i...
by EricaJoy
Sat Mar 01, 2008 8:40 pm
Forum: Sites & Infrastructure - Feedback/Information
Topic: Forum passwords emailed in plain text
Replies: 9
Views: 772

Re: Forum passwords emailed in plain text

As the email says, it so you can save this for future use. Saving a password in email for future use isn't really the best idea. Essentially, if a person can't remember their password, they should use the password recovery methods you guys already have implemented. In any case, this s something ver...
by EricaJoy
Sat Mar 01, 2008 7:23 pm
Forum: Sites & Infrastructure - Feedback/Information
Topic: Forum passwords emailed in plain text
Replies: 9
Views: 772

Forum passwords emailed in plain text

As is probably obvious, I just registered for the forum (congrats on the migration from SMF to phpbb3 btw). I received my activation email and horrors of horrors, there is my password in plain text. As a wise person once told me, email is more like a postcard than a letter so that password is now re...