I really think it'd be interesting for sites to display their password
policy in a multi-part logo like the creative commons one.

i.e. 512-S-H => 512 bit salted hash
vs 0-P-C => no bits of entropy, Plain, Clear

It might make them easier to crack by reducing the key-space but sending my
password over SMTP also reduces the key space a fair bit :p



Michael M. Minutillo
Indiscriminate Information Sponge
http://codermike.com


On Thu, Apr 4, 2013 at 2:14 PM, Ben Scott <[email protected]> wrote:

>  NetRegistry does the same. At least you have to sign in to the reseller
> account first but after that, clear text all the way.
>
>
>
>
> On 4/04/2013 6:09 PM, Bec Carter wrote:
>
> Just realised the web hoster I use does the same (ahem studiocoast)..they
> even display it in cleartext on the admin control panel page upon login.
> Never thought they'd do that so didn't notice just til now
>
>  On Tue, Mar 26, 2013 at 9:42 PM, Corneliu I. Tusnea <
> [email protected]> wrote:
>
>> This is one of those "OMG, there are still websites keeping passwords in
>> clear text" moments but Skywards happily sent me back my password in clear
>> text.
>>
>>  Anyone knows anyone in Skywards that I can get their a*** kicked for
>> this?
>>
>>  http://tinypic.com/r/10ds11y/6
>>
>>  [image: Inline image 1]
>>
>>  Regards,
>> Corneliu.
>>
>>
>
>

<<image/png>>

Reply via email to