Question about passwords and security.

The forum in which to talk about the forums. A good place for suggestions or gripes.
Post Reply
User avatar
Nixon
Welcome to this Groove
Posts: 3
Joined: Tue Mar 28, 2017 10:47 am

Question about passwords and security.

Post by Nixon »

Upon making an account, the confirmation email says
Please do not forget your password as it has been encrypted in our database
and we cannot retrieve it for you. However, should you forget your password
you can request a new one which will be activated in the same way as this
account.
It says the password is encrypted, yet in the same email, my password is displayed in plain text. What's going on here?
User avatar
fatlip
Taiyed Brodel
Posts: 6356
Joined: Wed Apr 27, 2005 11:47 pm
Location: NY

Re: Question about passwords and security.

Post by fatlip »

who cares?
$lmjimy311 wrote:the ram seemed a little out of place. i didnt mind the tiger
:evil5: :happy10:
logosteel
Taiyed Brodel
Posts: 1895
Joined: Sat Jun 11, 2005 12:03 am

Re: Question about passwords and security.

Post by logosteel »

Post a screen shot of the email? I work in tech support.
User avatar
Jordan311
Phlegmatic in stature
Posts: 15073
Joined: Sat Apr 09, 2005 2:56 am
Location: Double Vision Quest
Contact:

Re: Question about passwords and security.

Post by Jordan311 »

fatlip wrote:who cares?
ImageImage
:evil5:
User avatar
Nixon
Welcome to this Groove
Posts: 3
Joined: Tue Mar 28, 2017 10:47 am

Re: Question about passwords and security.

Post by Nixon »

fatlip wrote:who cares?
Well I mean if you're using a similar password on another site and this place somehow gets compromised, your password (email address included) will be available for whoever the fuck to see.
logosteel wrote:Post a screen shot of the email? I work in tech support.
Image

Fair enough, the email is 'via bluehost' but it doesn't take away the fact that the passwords have no encryption despite the email saying they do. There's no sort of encryption on the email either.
User avatar
Jordan311
Phlegmatic in stature
Posts: 15073
Joined: Sat Apr 09, 2005 2:56 am
Location: Double Vision Quest
Contact:

Re: Question about passwords and security.

Post by Jordan311 »



lol he actually posted a screenshot of the email

Later
ImageImage
:evil5:
dj3stripes
Taiyed Brodel
Posts: 3043
Joined: Thu Apr 28, 2005 2:39 am
Location: Omaha

Re: Question about passwords and security.

Post by dj3stripes »

Nixon wrote:
fatlip wrote:who cares?
Well I mean if you're using a similar password on another site and this place somehow gets compromised, your password (email address included) will be available for whoever the fuck to see.
logosteel wrote:Post a screen shot of the email? I work in tech support.
Image

Fair enough, the email is 'via bluehost' but it doesn't take away the fact that the passwords have no encryption despite the email saying they do. There's no sort of encryption on the email either.
The email states they are encrypted in the DB, not in the email that was sent to you as a courtesy. Just delete it and if you forget your password you can have it reset, you just won't have it sent to you like it did this first time during registration.

make sense? you read into it incorrectly, that's all.
Post Reply