Not only does Plusnet store passwords in plain text, call centre employees can see that plaintext when you call in http://www.theregister.co.uk/2015/11/25/plusnet_still_delivering_passwords_plaintext/ …
-
Usually one or two of the first five or six characters, so the customer doesn't have to count too far, apparently
So a Plusnet call centre employee could just log in as any customer, see their email, etc.
-
-
. Passwords are encrypted in our database. We do not show customers their passwords in an email in plain te... https://plusnet.response.lithium.com/portal/conversation/18417778 …
-
Passwords are visible in plain text to call centre employees. This should be impossible. They should be hashed, not encrypted
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.