outrageous
Account Closed
- Impact
- 0
I was shocked to get an e-mail with my account's pasword in clear text,
along with my real name! That's like giving the world my password!
A legit company doesn't even EVER *KNOW* a user's password!!! They have no damn business doing that. I'm disgusted. I hope they learn something about security and respect their patrons privacy better. I am very very very disapointed and was completely shocked to see how careless they are with their user's information.
We use handles and passwords to keep a modicum of security and anonymity. I don't want someone getting that info from e-mail through servers and then trying to crack other accounts or hack me.
Shame on Moniker!
Examples of what I mean...
What if you register an account with Moniker, and you're reading your e-mail, and your precousious teen is looking over your shoulder, or co-workers when that e-mail is up. They'll see your password when you get the confirmation e-mail from Moniker, and you won't even realize that they are so careless with your information until AFTER you give it to them!
With UNIX and Windows, the OS doesn't even STORE the *real* password. Yes, it can be done so that the system that uses the passwords never even knows your password. It is an old technique. Several decades old, in computing.
It works like this:
User enters password and it is crunched through an algorithm to a 'hash' code, that is a one way encryption that yeilds a large number. Everytime that same password is hashed, it yeilds the same number. Other passwords can also yield that same number, but only one in many millions or billions will.
There is no way to go from the hash back to the original password. It is the hash code that is stored in the user's account.
When the user logs in, the system hash's the password and compares the hash of the login attempt to the hash in the account on file.
The company NEVER stores the real password, and protects the whole transaction to protect the consumer from being hacked by the public, and other users on the computer.
I'm just so disappointed that sites which are involved with valuable things and big transactions are compromising customers.
PLEASE, PLEASE, Moniker, fix this soon and let us know.
along with my real name! That's like giving the world my password!
A legit company doesn't even EVER *KNOW* a user's password!!! They have no damn business doing that. I'm disgusted. I hope they learn something about security and respect their patrons privacy better. I am very very very disapointed and was completely shocked to see how careless they are with their user's information.
We use handles and passwords to keep a modicum of security and anonymity. I don't want someone getting that info from e-mail through servers and then trying to crack other accounts or hack me.
Shame on Moniker!
Examples of what I mean...
What if you register an account with Moniker, and you're reading your e-mail, and your precousious teen is looking over your shoulder, or co-workers when that e-mail is up. They'll see your password when you get the confirmation e-mail from Moniker, and you won't even realize that they are so careless with your information until AFTER you give it to them!
With UNIX and Windows, the OS doesn't even STORE the *real* password. Yes, it can be done so that the system that uses the passwords never even knows your password. It is an old technique. Several decades old, in computing.
It works like this:
User enters password and it is crunched through an algorithm to a 'hash' code, that is a one way encryption that yeilds a large number. Everytime that same password is hashed, it yeilds the same number. Other passwords can also yield that same number, but only one in many millions or billions will.
There is no way to go from the hash back to the original password. It is the hash code that is stored in the user's account.
When the user logs in, the system hash's the password and compares the hash of the login attempt to the hash in the account on file.
The company NEVER stores the real password, and protects the whole transaction to protect the consumer from being hacked by the public, and other users on the computer.
I'm just so disappointed that sites which are involved with valuable things and big transactions are compromising customers.
PLEASE, PLEASE, Moniker, fix this soon and let us know.
