Skip past navigation
Skip to Sign in form
Skip to Join form

Try Mailstrom: the faster, smarter, free way to Inbox Zero.

Replyz collects and amplifies questions from around the web, allowing a wider audience to answer them.

Share your knowledge and build your reputation by posting helpful replies.

@kevinmitnick Las Vegas, NV

Follow This User

The million dollar question is: WHY is Yahoo is storing plaintext passwords in their backend database. Do these companies ever learn?

2:19AM Thu, July 12 2012

dude. no. they dont. rhetorical question :D

2:19AM Thu, July 12 2012

@barbiche Stockholm, Sweden

'Cause mediocrity takes a lot less time and most people won't notice anyway?

2:20AM Thu, July 12 2012

@ammmir Mountain View, CA

nope. i see people still thinking md5($password . $salt) is safe in 2012. security education needs to start earlier.

2:20AM Thu, July 12 2012

@M36gPanda Google Headquarters

really could they be that dumb

2:20AM Thu, July 12 2012

Unbelieveable right...Yahoo....I guess only way companies care is if they start getting sued for hundreds of millions

2:21AM Thu, July 12 2012

@RealPsDev America

Should be encrypted in md5, although brute force or dictionary attack could get them easy too.

2:21AM Thu, July 12 2012

@johnedwarddoyle Liverpool

Pure laziness. Quite unbelievable really. More monitoring of standards is required.

2:22AM Thu, July 12 2012

@tobkin Minneapolis, MN

You should know by now that the answer is no, they never learn.

2:23AM Thu, July 12 2012

@ITALIAN_ELITE Italia

http://t.co/58W5HVAU is the answer

2:23AM Thu, July 12 2012

Nope, most companies will never learn. What happens in the past repeats itself constantly.

2:23AM Thu, July 12 2012

@stevegibson Austin, TX

that database probably hasn't been touched since the 90's, lol

2:24AM Thu, July 12 2012

@UlrikaEvertsson

because they can. Becase they're lazy. Because they don't care about client security... Who knows....

2:24AM Thu, July 12 2012

@xquis BELGIUM

hoping pin codes will provide them more liquidity

2:24AM Thu, July 12 2012

@dlilja Stockholm, Sweden

They probably never will, and that's why we're existing. It's like the Yin and Yang of the security world. Sort of.

2:25AM Thu, July 12 2012

@Zookus Everywhere.

@kevinmitnick At least a Telnet Daemon isn't running on the Yahoo! Voice server. I checked. Just in case.

2:25AM Thu, July 12 2012

@deviousdrdave 127.0.0.1

Onyl the hard way, unfortunately...

2:25AM Thu, July 12 2012

@AlanBailward Vancouver, BC, Canada

@kevinmitnick Yes, I’d guess a combo of laziness and legacy backwards compatibility to keep a mess of systems glued together

2:26AM Thu, July 12 2012

@marcodejong Hilversum

It saves time :)

2:27AM Thu, July 12 2012

apparently not.

2:31AM Thu, July 12 2012

@markwonderful Paradise Valley, Arizona 85253

Read 'The Big Short' by Michael Lewis? Even tho it's about the mortgage crisis they have never ending "and no one saw this?"

2:34AM Thu, July 12 2012

@vikphatak Austin, TX

You are Yahoo's product, not their customer. They make money by selling info about you. Why protect your passwords?

2:35AM Thu, July 12 2012

@vikphatak Austin, TX

Not that Yahoo is unique in that regard.

2:36AM Thu, July 12 2012

@c_chep Paris, France

endlessy hiring rookies, firing those who learned from earlier mistakes ensures more mistakes and the illusion of cost cutting

2:37AM Thu, July 12 2012

@DroidNutNZ New Zealand

Why would anyone have anything to do with Yahoo full stop? 99.9% of spam/scam email I receive comes via a #Yahoo address.

2:39AM Thu, July 12 2012

@katipoaudio iPhone: 0.00000...

Ghost In The Wire, was such an awesome book! Couldn't put it down, even my GF read it. You are truly inspiring mate :) Bigups!

2:39AM Thu, July 12 2012

Same reason so many people still use one password for everything, or just save them all in a file. Laziness and money. :/

2:41AM Thu, July 12 2012

@prashhantmisra Mumbai

couldn't agree more! They are on d way to screwing up, god save

2:47AM Thu, July 12 2012

@AWSOMEDEVSIGNER Germany

Check out Geeklist http://t.co/2wtrR5lU I know that you have thousands of followers, therefore sending more invites. @gklst

2:53AM Thu, July 12 2012

@jeremydhoinne Lille, France

@kevinmitnick password protection is the packaging you put around your product to prevent it from being damaged. No excuses!

2:56AM Thu, July 12 2012

They are operating on a similar equation to the one Edward Norton uses in Fight Club. "If X is less than the cost of a recall"

2:56AM Thu, July 12 2012

@ihackedwhat Canada

short answer: no

3:07AM Thu, July 12 2012

No, these comp,its don't ever learn. That's why they are legally considered people :-)

3:10AM Thu, July 12 2012

@elizmmartin Chicago, IL

I think the million dollar question here is WHO actually uses Yahoo services and is this being overhyped?

3:19AM Thu, July 12 2012

@kevinmitnick the REAL million dollar question is, what's "Yahoo"?

3:19AM Thu, July 12 2012

@fboliva São Paulo / Brazil

:) The two million dollar answer: No, they will never learn! sad but true...

3:22AM Thu, July 12 2012

yeah, I never did this and I ran a small company. It's like they want something bad to happen.

3:23AM Thu, July 12 2012

@buckbabcock costa rica

i want to be as smart as u :( s.os

3:52AM Thu, July 12 2012

Anonymous

Follow This Conversation

Related Conversations

Does anyone know of any other companies besides Yahoo! and Google that support t…

First Yahoo, and now Junglee. Why do these American companies keep trying to sou…

Why don't I ever learn?

Hey, Yahoo "Local" - if I search for 'flowers', why are you showing me book stor…

New CMO for Yahoo - how big does an organisation need to be to have CMO? Why don…

Topics Like This

Conversations about "backend"

Conversations about "storing"

Like to reply? Try Flashcards

Flashcards is a quick and fun way to share your knowledge about topics you like to tweet about. Sign in with Twitter and we’ll show you questions you can’t resist!