Tuesday, March 5, 2013

your financial security is important to us

from here (found using a google search)

this tweet inspired me to go looking for the actual page where ING is apparently offering to send you your password by snail mail, but i couldn't find it. i did find others, though. any site that offers to send you your password rather than a new password is not storing your password safely. if it were hashed there'd be no way to get the original password back out.