Sandpanther (sandpanther) wrote,

  • Mood:

I May Be Prejudiced, But I Do Have Reasons

Lastest lovely thought from the contractor: "Why are the user login passwords in the database encrypted? Just having them in the database is secure enough. No one can get to them there."


After spending a while explaining "because the US government says to" I think I finally convinced her not to change it. I don't think I've convinced her that there is a good reason for not leaving passwords lying around in the clear.

For anyone wondering why I have my unreasoning mistrust of contractors, this is a classic example.
  • Post a new comment


    default userpic
    When you submit the form an invisible reCAPTCHA check will be performed.
    You must follow the Privacy Policy and Google Terms of use.