Dubstepforum.com

Go onto Gmail or whatever and type in your password.

It's amazing how many incompetent companies there are out there, what to do though?

I got this reply when I asked one of them about it

'Hey WIl - someone else mentioned that to us but we don't know what to do about it - like about 30% of the worlds' e-commerce sites we use the Magento platform as the framework on which ours is built. There's nothing in the System Admin for transactional emails whatsoever that allows you to encrypt the password (or even not send the confirmation email when you first register).

We use Sagepay as the payment gateway so we don't have access to, or ever even see, anything other than the last four digits of your card and there's no personal details other than your name, address and phone number stored on our site (we don't ask for date of birth or anything)

cheers

Jason'

I sent this in return - http://plaintextoffenders.com/about/

What else could I have done to spank their little botties?

I dont get it.

Didn't read, didn't get

Wot are u on about

Are you signing up to some dodgy sites using the same password that you use for gmail?

gotta love those redeye emails

yeah redeye do it too, when you register, they email you with the password you used to register in plain text.

does no one else see how fucking stupid this is?

i guess theyre assuming you arent a speng and give other people access to ur personal email?
not seeing the problem here tbh

lloydnoise wrote:i guess theyre assuming you arent a speng and give other people access to ur personal email?
not seeing the problem here tbh

If somebody gets access to your email regardless of whether you give it to them or not, then they also have a bunch of your passwords, if you're not careful.

they shouldn't be storing our passwords like that, never mind emailing them back to us ffs

It is a terrible way to do it. I think they intend you to change it on your first log in though

you really actually a retard if you think this is ok

redeye email it to you every order you place

Riddles wrote:redeye email it to you every order you place

Makes me laugh that does, like, you've logged in, paid for it, but the conformation email is like "just in case you forgot, here's your password."

For a joke, we should all paste our latest emails from redeye into this thread.

Hey Wil - I've had a look over the site and although I'm not at all being complacent, your Rubadub account contains nothing of any value to hackers that I can think of. It only contains your name, address, phone number and e-mail and what you have bought. We don't store card details because those are submitted to Sagepay (one of the biggest card processing companies in the world) and they basically just say "yes, this person's transaction is complete and you can send the goods" or "there is a problem with this transaction, don't send the goods". We don' ask for your date of birth, town of birth or anything else so there's really not much in your account that a hacker would find useful.

I'll discuss it again with our web developers and see what they recommend though

cheers

Jason

that's not the point...

I don't even think I'll bother replying

nah i get you, bare easy to get into emails

majority of people will only use a few passwords as a maximum, odds on if you got their database, there would be loads of email and addresses that could be used to get into their email accounts. from there you could probably find more stuff.

considering you log into stuff like paypal with email + password too, i bet you could get people's paypals and loads of other sites.

Lol who cares

Peopl always worry about getting there emails and shit 'hacked' do any of you actually know anyone thos has happened to who isnt a pensioner?

I don't know anybody that's been murdered but I still want the police to keep me secure from murderers too.