CNBC taught a horribly botched lesson in password security
http://www.engadget.com/2016/03/30/cnbc-botches-password-security-lesson/
CNBC just learned a hard, hard lesson about password security.
The news outlet posted (and promptly took down) an article on
the subject whose centerpiece was a "how strong is your
password?" text entry box that, if anything, was a classic
example of how not to manage those all-important logins. For a
start, Google's Adrienne Porter Felt noticed that the box sent
your password unencrypted, guaranteeing that any snoop could
intercept it and test it against your real accounts. To make
matters worse, others discovered that the site sent the password
to not just a Google Docs spreadsheet, but to multiple third
parties -- when CNBC said "no passwords are being stored," it
was flat-out wrong.
- - -
--Lauren--
Lauren Weinstein ([email protected]): http://www.vortex.com/lauren
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
I have consulted to Google, but I am not currently
doing so -- my opinions expressed here are mine alone.
_______________________________________________
pfir mailing list
http://lists.pfir.org/mailman/listinfo/pfir
