Not sure how it shortens my signup, but interesting point re: the "share" feature. At first glance made me think "oh I hope they're not storing passwords in plaintext".
Don't worry. We aren't storing anything in plaintext. SHA-1 with a 256-bit salt.
Sorry, I was a little confused about the password-via-email comment. No, it doesn't shorten your reg. Only the share. We include the password for easy record-keeping for users. Also, we don't keep anything of value on JTB. It is just receipts. No bank account numbers or CC numbers. Just like a paper receipt.
You're still sending the password I entered back to me in an email in plaintext, even if you're not keeping it.
This is considered horrible practice.
I was excited about your product until I received an email with my password in it.. it just killed my enthusiasm. At some point I'll look back, but for a site that stores financial data...kinda scary.
Comments
Not sure how it shortens my signup, but interesting point re: the "share" feature. At first glance made me think "oh I hope they're not storing passwords in plaintext".
Don't worry. We aren't storing anything in plaintext. SHA-1 with a 256-bit salt.
Sorry, I was a little confused about the password-via-email comment. No, it doesn't shorten your reg. Only the share. We include the password for easy record-keeping for users. Also, we don't keep anything of value on JTB. It is just receipts. No bank account numbers or CC numbers. Just like a paper receipt.
You're still sending the password I entered back to me in an email in plaintext, even if you're not keeping it.
This is considered horrible practice.
I was excited about your product until I received an email with my password in it.. it just killed my enthusiasm. At some point I'll look back, but for a site that stores financial data...kinda scary.
Awesome, thanks for the clarification.