92 Million MyHeritage Users Data Swiped

Vultra · 07-09-2018, 03:39 PM

Mate, plain text password is NOT good. Why can't businesses just make it SHA256 like, you're then protecting users data and privacy. That's embarrassing.

mothered · 07-09-2018, 03:46 PM

(07-09-2018, 03:39 PM)Mimiakira Wrote: Mate, plain text password is NOT good. Why can't businesses just make it SHA256 like, you're then protecting users data and privacy. That's embarrassing.

I've literally compromised close to 3k websites, and I can confidently say that over 95% had passwords and sensitive transaction details stored In plain text.

If I was someone with malicious Intent, there's no prizes for guessing what could've eventuated.

Vultra · 07-09-2018, 03:52 PM

(07-09-2018, 03:46 PM)mothered Wrote:
(07-09-2018, 03:39 PM)Mimiakira Wrote: Mate, plain text password is NOT good. Why can't businesses just make it SHA256 like, you're then protecting users data and privacy. That's embarrassing.

I've literally compromised close to 3k websites, and I can confidently say that over 95% had passwords and sensitive transaction details stored In plain text.

If I was someone with malicious Intent, there's no prizes for guessing what could've eventuated.

Well, that's absolutely stupid. From your findings, is the websites mostly from India and overseas from where you are?

mothered · 07-09-2018, 03:54 PM

(07-09-2018, 03:52 PM)Mimiakira Wrote: is the websites mostly from India and overseas from where you are?

All parts of the globe on every scale.

I don't target specifics.