Show Posts
1
Improving QueueMetrics / Password sexurity with Quemetrics 1.4.4
« on: June 07, 2008, 16:58:42 »
Whilst creating a new account for someone recently, I was horrified to discover that whenever you edit a user account, their password is displayed in clear text on the screen with no obfuscation at all.
It's been some time since I last edited user accounts on our system, so it's possible that this isn't a new problem - though generally speaking it's the kind of thing I look for when entering passwords.
Could we please look at obscuring passwords when they are being entered? Additionally, this raises the concern of how passwords are stored in the database - are they encrypted at all? If not, this too is a significant security problem.
It's been some time since I last edited user accounts on our system, so it's possible that this isn't a new problem - though generally speaking it's the kind of thing I look for when entering passwords.
Could we please look at obscuring passwords when they are being entered? Additionally, this raises the concern of how passwords are stored in the database - are they encrypted at all? If not, this too is a significant security problem.
