Date : Wed, 01 Dec 2010 06:31:47
From : heyrick.beebsoc@... (Rick Murray)
Subject: [BeebSoc] Re: mosthosts.net mailing list memberships reminder
Just received this automated email from the mailing list server:
[...snip explanation, I'm sure you all received one too...]
> Passwords for heyrick.beebsoc@...
>
> List Password // URL
> ---- --------
> beebsoc@... XXXXXXX
^^^^^^^
Obviously I've edited my details :-) but, um, shouldn't this count as a
"risk", sending passwords in cleartext like that? In fact, even
*keeping* the original password (instead of the result of a one-way hash
(etc)) is a bit lame nowadays.
Best wishes,
Rick.