Comment on Bad Security at EviteComments−staunch17ySending your password after signup doesn't necessarily mean they're storing it permanently.−ardellOP17yYou're absolutely correct, but in evite's case they are storing them permanently. That's actually the reason I posted this was that I forgot my password and requested a reset (~5 years after signup) and they sent it to me in plain text.−myoung817yAnd it doesn't mean they're storing it in cleartext either. For some reason I don't think he'd understand how virtual attributes work, though...
Comments
Sending your password after signup doesn't necessarily mean they're storing it permanently.
You're absolutely correct, but in evite's case they are storing them permanently. That's actually the reason I posted this was that I forgot my password and requested a reset (~5 years after signup) and they sent it to me in plain text.
And it doesn't mean they're storing it in cleartext either. For some reason I don't think he'd understand how virtual attributes work, though...