2
votes
2answers
491 views

Managing and deploying web app passwords

What are some best practices for managing and deploying web app passwords and private keys? E.g. the password to access a database or external services like the Facebook API. I'm referring generally ...
15
votes
4answers
841 views

If a website allows another person to get a list of the site's users passwords, how likely is it that the passwords are stored in cleartext?

We had an incident where some of our managers were given passwords for the people they supervise using a particular company website. Ostensibly it was done so the managers could check in on the users ...
8
votes
3answers
507 views

How is “anonymous” getting ahold of all these plain-text passwords

In the last several months there have been several publicized data breaches and public website defacements done by several different hacking groups (which the media loves to group under a single ...