View Single Post
Old 05-08-2013, 12:19 PM  
signupdamnit
Confirmed User
 
signupdamnit's Avatar
 
Industry Role:
Join Date: Aug 2007
Posts: 6,697
Quote:
Originally Posted by Dankasaur View Post
It's been proven that your method of "security" behind this is not good...



http://www.pcmag.com/article2/0,2817,2362692,00.asp
It also encourages people to write down passwords or to choose nearly the same password each time with slight variations. No one can remember 20-50 different passwords which have to be changed every few months. You simply cannot keep all that in your head.

Worse yet if the company is incompetent there is the risk that they store past passwords without hashes or encryption so if a hacker gets the database they not only get your current password but all your past stored passwords too. They then can use these at all your other online accounts. More than likely Paxum uses hashes or encryption (if not the owners should go to jail) but even then there is still a risk of compromise depending on the implementation.
__________________

You don't like my posts? Put me on ignore or fuck right off. I'll say what I want.
signupdamnit is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote