Companies that send you an email with your password in it

nobody · Post by **nobody** » Thu Jan 22, 2015 6:04 am

Go onto Gmail or whatever and type in your password.

It's amazing how many incompetent companies there are out there, what to do though?

I got this reply when I asked one of them about it

'Hey WIl - someone else mentioned that to us but we don't know what to do about it - like about 30% of the worlds' e-commerce sites we use the Magento platform as the framework on which ours is built. There's nothing in the System Admin for transactional emails whatsoever that allows you to encrypt the password (or even not send the confirmation email when you first register).

We use Sagepay as the payment gateway so we don't have access to, or ever even see, anything other than the last four digits of your card and there's no personal details other than your name, address and phone number stored on our site (we don't ask for date of birth or anything)

cheers

Jason'

I sent this in return - http://plaintextoffenders.com/about/

What else could I have done to spank their little botties?

cyclopian · Post by **cyclopian** » Thu Jan 22, 2015 6:35 am

I dont get it.

Molzie · Post by **Molzie** » Thu Jan 22, 2015 7:04 am

Didn't read, didn't get

mason666 · Post by **mason666** » Thu Jan 22, 2015 7:23 am

Wot are u on about

mks · Post by **mks** » Thu Jan 22, 2015 7:48 am

Are you signing up to some dodgy sites using the same password that you use for gmail?

Riddles · Post by **Riddles** » Thu Jan 22, 2015 7:49 am

gotta love those redeye emails

nobody · Post by **nobody** » Thu Jan 22, 2015 9:14 am

yeah redeye do it too, when you register, they email you with the password you used to register in plain text.

does no one else see how fucking stupid this is?

lloydnoise · Post by **lloydnoise** » Thu Jan 22, 2015 10:38 am

i guess theyre assuming you arent a speng and give other people access to ur personal email?
not seeing the problem here tbh

garethom · Post by **garethom** » Thu Jan 22, 2015 10:44 am

lloydnoise wrote:i guess theyre assuming you arent a speng and give other people access to ur personal email?
not seeing the problem here tbh

If somebody gets access to your email regardless of whether you give it to them or not, then they also have a bunch of your passwords, if you're not careful.

nobody · Post by **nobody** » Thu Jan 22, 2015 10:46 am

they shouldn't be storing our passwords like that, never mind emailing them back to us ffs

Samuel_L_Damnson · Post by **Samuel_L_Damnson** » Thu Jan 22, 2015 11:08 am

It is a terrible way to do it. I think they intend you to change it on your first log in though

nobody · Post by **nobody** » Thu Jan 22, 2015 11:12 am

you really actually a retard if you think this is ok

Riddles · Post by **Riddles** » Thu Jan 22, 2015 11:12 am

redeye email it to you every order you place

garethom · Post by **garethom** » Thu Jan 22, 2015 11:15 am

Riddles wrote:redeye email it to you every order you place

Makes me laugh that does, like, you've logged in, paid for it, but the conformation email is like "just in case you forgot, here's your password."

For a joke, we should all paste our latest emails from redeye into this thread.

nobody · Post by **nobody** » Thu Jan 22, 2015 12:21 pm

Hey Wil - I've had a look over the site and although I'm not at all being complacent, your Rubadub account contains nothing of any value to hackers that I can think of. It only contains your name, address, phone number and e-mail and what you have bought. We don't store card details because those are submitted to Sagepay (one of the biggest card processing companies in the world) and they basically just say "yes, this person's transaction is complete and you can send the goods" or "there is a problem with this transaction, don't send the goods". We don' ask for your date of birth, town of birth or anything else so there's really not much in your account that a hacker would find useful.

I'll discuss it again with our web developers and see what they recommend though

cheers

Jason

that's not the point...

nobody · Post by **nobody** » Thu Jan 22, 2015 12:21 pm

I don't even think I'll bother replying

RKM · Post by **RKM** » Thu Jan 22, 2015 12:23 pm

nah i get you, bare easy to get into emails

Riddles · Post by **Riddles** » Thu Jan 22, 2015 12:25 pm

majority of people will only use a few passwords as a maximum, odds on if you got their database, there would be loads of email and addresses that could be used to get into their email accounts. from there you could probably find more stuff.

considering you log into stuff like paypal with email + password too, i bet you could get people's paypals and loads of other sites.

mason666 · Post by **mason666** » Thu Jan 22, 2015 12:58 pm

Lol who cares

Peopl always worry about getting there emails and shit 'hacked' do any of you actually know anyone thos has happened to who isnt a pensioner?

garethom · Post by **garethom** » Thu Jan 22, 2015 1:00 pm

I don't know anybody that's been murdered but I still want the police to keep me secure from murderers too.

Companies that send you an email with your password in it

Companies that send you an email with your password in it

Re: Companies that send you an email with your password in i

Re: Companies that send you an email with your password in i

Re: Companies that send you an email with your password in i

Re: Companies that send you an email with your password in i

Re: Companies that send you an email with your password in i

Re: Companies that send you an email with your password in i

Re: Companies that send you an email with your password in i

Re: Companies that send you an email with your password in i

Re: Companies that send you an email with your password in i

Re: Companies that send you an email with your password in i

Re: Companies that send you an email with your password in i

Re: Companies that send you an email with your password in i

Re: Companies that send you an email with your password in i

Re: Companies that send you an email with your password in i

Re: Companies that send you an email with your password in i

Re: Companies that send you an email with your password in i

Re: Companies that send you an email with your password in i

Re: Companies that send you an email with your password in i

Re: Companies that send you an email with your password in i

Who is online