50 reputation
4
bio website
location
age
visits member for 5 years, 4 months
seen Sep 26 '09 at 1:29

Sep
25
accepted If a “forgot your password?” page emails your old password, is that definitive proof that they have stored it in plain text?
Sep
25
comment Should I be concerned if my Git hosting provider stores passwords in plaintext?
Titled edited as requested. And thanks for responding to this question. I appreciate hearing from someone who works at ProjectLocker. Also I posted a follow-up question earlier that is not specific to ProjectLocker to try to understand the technicalities of this issue better: superuser.com/questions/46877/…
Sep
25
awarded  Editor
Sep
25
revised Should I be concerned if my Git hosting provider stores passwords in plaintext?
edited title
Sep
25
accepted Should I be concerned if my Git hosting provider stores passwords in plaintext?
Sep
25
awarded  Supporter
Sep
25
awarded  Student
Sep
25
asked If a “forgot your password?” page emails your old password, is that definitive proof that they have stored it in plain text?
Sep
25
awarded  Scholar
Sep
25
comment Should I be concerned if my Git hosting provider stores passwords in plaintext?
Good test. They do in fact mail you a copy of your old password from this link: portal.projectlocker.com/login/lost_password
Sep
25
comment Should I be concerned if my Git hosting provider stores passwords in plaintext?
Phoshi: That's what I was thinking too. Someone working at any Git hosting company is probably able to peek into its users code if they want to.
Sep
25
comment Should I be concerned if my Git hosting provider stores passwords in plaintext?
@Grant: Good example. Thanks for illustrating.
Sep
25
comment Should I be concerned if my Git hosting provider stores passwords in plaintext?
You mean there could be different levels of security even while using plain text storage?
Sep
25
comment Should I be concerned if my Git hosting provider stores passwords in plaintext?
Oh, so it's referring to whether people with access on ProjectLocker can read my password, not external users. I misunderstood where the risk was coming from. I would think there would always be a risk of an employee at a hosting provider taking a peek at your stuff. If it's not in plaintext, then I would imagine it's more difficult but still possible. Yes, I could ask them but I don't know how much weight I would give their assurances.
Sep
25
asked Should I be concerned if my Git hosting provider stores passwords in plaintext?