Timeline for If you mistakenly try to access a website with an unrelated username/password, do they record your logon data?
Current License: CC BY-SA 4.0
7 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Mar 3, 2020 at 7:54 | comment | added | user163495 | @Tangurena Username and password could be considered Personal information, and it'd be difficult to argue you're storing people's passwords in plaintext for legitimate reasons. However, I'm not a lawyer, so I don't know for sure. Hence why I said "as far as I know" | |
Mar 2, 2020 at 21:24 | comment | added | Tangurena | @MechMK1, what section of GDPR would forbid this? | |
Mar 2, 2020 at 17:08 | comment | added | Barmar | @AntiNoise This is an inherent danger if you have to manually select the password to paste, rather than the browser doing it automatically. | |
Mar 2, 2020 at 11:12 | comment | added | AntiNoise | To be clear, this was in no way a phishing site, it just has a KeePass entry that appears similar to the site I intended to launch. Both are related to rent and utility payments but one is for viewing only (the site I mistakenly launched, then ran the actual payment site logon in its fields). I'm renaming one of the entries to reduce the chance of this happening again. | |
Mar 2, 2020 at 8:06 | history | edited | schroeder♦ | CC BY-SA 4.0 |
added 1 character in body
|
Mar 2, 2020 at 6:54 | comment | added | user163495 | GDPR, as far as I know, forbids it. Then again, not everyone is subject to GDPR (or abides by it). | |
Mar 2, 2020 at 2:32 | history | answered | jdow | CC BY-SA 4.0 |