Timeline for Is a plain password in the URL a potential security threat?
Current License: CC BY-SA 3.0
12 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Nov 15, 2016 at 20:48 | comment | added | zakkos | @kicken "fun" thing is I logged on their website because I needed a document to change company! So yes, I'll definitely change it! | |
| Nov 15, 2016 at 20:46 | vote | accept | zakkos | ||
| Nov 15, 2016 at 20:40 | history | edited | Arminius | CC BY-SA 3.0 |
added 183 characters in body
|
| Nov 15, 2016 at 20:36 | comment | added | kicken | @zakkos you could also change insurance companies. A company that careless regarding security doesn't deserve your money IMO. | |
| Nov 15, 2016 at 20:32 | comment | added | Arminius | @zakkos Yes, that's all you can do. It's also a nice gesture to inform them about the problem but I wouldn't expect too much from it. | |
| Nov 15, 2016 at 20:02 | comment | added | zakkos | Well, thank you then! So, to recap, all I can (and actually should) do is to find another pattern and change all my passwords that uses it (I actually have more than one pattern) except, of course, the one on that website. Right? Should I send them an e-mail with my concerns? | |
| Nov 15, 2016 at 18:36 | history | edited | Arminius | CC BY-SA 3.0 |
added 559 characters in body
|
| Nov 15, 2016 at 18:26 | history | edited | Arminius | CC BY-SA 3.0 |
added 559 characters in body
|
| Nov 15, 2016 at 18:22 | comment | added | 700 Software | Even if they use strong (unlikely IMHO) hashing on the proper password fields, the server logs, etc. would be in plain text. | |
| Nov 15, 2016 at 18:11 | history | edited | Arminius | CC BY-SA 3.0 |
added 559 characters in body
|
| Nov 15, 2016 at 18:01 | history | edited | Arminius | CC BY-SA 3.0 |
added 559 characters in body
|
| Nov 15, 2016 at 17:50 | history | answered | Arminius | CC BY-SA 3.0 |