Re: password.incleartext.com

0
70

Posted by Romain Bourdy on Apr 06

Hi Full-Disclosure,

Just my two cents but … the fact they can give your password back doesn't
mean it's stored in cleartext, just that it's not hashed but encrypted with
some way to get the original data back, this doesn't mean at all it's not
secured, even though in most case it's not.

-Romain

Source: Re: password.incleartext.com