How securely do they store user passwords & how good are they at letting us know? And how do *you* store passwords? A project by Michal Špaček @spazef0rze
In your questions, asking
Joined February 2018
- Tweets169
- Following1
- Followers438
- Likes46
The project itself was launched in 2016 in this talk at @BSidesLV youtu.be/vt-6n2ohbOk (waving at @thorsheim 👋) and the idea itself dates back to 2014 when I gave a talk about improving security at a company I was working for back then.
I've added sorting and search, a feature some of you have requested quite a few times – and rightfully so, there's now 130+ sites that have somehow disclosed their password storage. Match highlighting and what not, it's all there! :-)
XeMeL, an XML feed editor, uses bcrypt (cost=12) to store user passwords. They state that right on the sign-up page (and in their docs too), nice! pulse.michalspacek.cz/passwo…
This is a password reminder email from @zeemaps. Oh ZeeMaps please stop storing user passwords in plaintext. Secure them with a proper password hash like Argon2 or bcrypt. Let me know once you do, I'd like to change the rating in my list then.
pulse.michalspacek.cz/passwo…
Just added, @FileForum emails you your forgotten password back. Rated F for Freakin' plaintext pulse.michalspacek.cz/passwo… Via @plntxtoffenders
