thecus esupport system and plain text passwords
i just registered on the thecus esupport system and submitted a ticket
the system just replied to my email, telling me my username and password in plain text !
the same username/password combination that i use to login on a whole HEAP of other websites.
so presumably that combination will be in wordlists all over the world by tomorrow, and now i have to change passwords on all of these sites.
there are millions of forums and message boards that hash the passwords and have a reset function for people who forget their passwords - nothing is even stored as plain text. it's not hard to do.
on a board like this, there must be hundreds of IT professionals - the very last people who want to see login credentials being set out in plain text.
please thecus. this is really, really, really unacceptable. please change this.
Re: thecus esupport system and plain text passwords
Ditto, It really is bad form to send me my password in an email response, even if the password is my throw away one.
Andy.
Re: thecus esupport system and plain text passwords
Dear Statick,
Thank you for your below post.
I will definitely forward your below suggestion to the relevant department.
_____________________________
Official Thecus Support Representative
Re: thecus esupport system and plain text passwords
Another ticket, and the password is still plain text.
Andrew.