Quote:
Originally Posted by SBJ
oh this is serious bizness  |
emails are commonly kept in plaintext. They are used by mailers for program operators and site owners; that are too lazy, or feel it would create a business inconvenience, to use encrypt/decrypt algorithms for emails. Mailing databases travel for legitimate purposes and can be compromised in decrypted transit also
Yeah, MD5 is a joke now for password or other secure storage. Website logins are not tokenised from PCI-DSS certified servers "normally."
I would guess that mainstream is no better in regard to controlling access to such mundane items as email addresses. Who gives a fuck if you subscribe to the WSJ, Facebook?, etc. Porn is good fodder for blackmail so it is a lot more interesting. Also, porn site emails are prime data for phishing.