@da_fish27

"Any programmers involved should be fired and shot."

Team responsible no doubt have a CMM 5 certificate.

@da_fish27

We outsource a lot of coding to a certain very large Indian operation. Some of the code that comes back is truly shocking, as in; "the person wot wrote this is obviously a clueless fucktard of the highest order".

It may be cheap, but you get exactly what you paid for.....

Not so fast: Not much wrong with using the same password

Yes there is.

1. Let's say 10,000 people use same username (gmail id) / same password for useless sites like

el reg and xnet and groupon subsidiaries. (But a totally diff one for gmail, bank, etc).

2. xnet, being a more security conscious than el reg, ups the security by asking a few personal questions in case you lose your password such as "Where was first time you had anal sex" etc.

3. groupon subsidiary loses all the passwords.

4. 10000 xnet and el reg accounts are hacked, no problem.

5. but out of those 10k lusers, 50% of them have the same security question at bank/gmail etc.

- So 5000 lusers give away access to their bank/gmail etc by losing gorupon -> xnet -> bank.

@alwarming

One would assume that if someone is security conscious enough not to use the same username//password for sites that matter they would also chose a different security question or do what I do, when forced to chose a question answer a load of garbage then forget it

Yes, because you can always choose your security questions.

So you have different security questions everywhere? Very probable.

And those people who are just doing as they're told, they circumvent this trap by filling in garbage (as opposed to something sensible, like a password management tool, or nothing at all)? Even more probable.

AC@23:05

<--

"What sort of admin puts such things where a search engine can find it, and leaves it there so long too!!"

Not so much an admin as more one of these guys.

md5?

google filetype:sql e10adc3949ba59abbe56e057f20f883e