I rushed and created an account for ufc.tv when the free preview was announced on Saturday. I neglected to save my password with LastPass and had to reset it today. They sent my password back in CLEAR TEXT.
This is a bad security practice. I hope everyone out there is using a password manager like LastPass or 1Password to generate random passwords and don't use the same login/pass as their email account, bank, etc.
Proof, blue-namer please:
http://i.imgur.com/Dg5qqUx.jpg
More on why this is bad:
http://plaintextoffenders.com/about/
Let me correct that I say, that I actually did save the password I set using LastPass, but ufc.tv truncated it to 16 characters from 25 without notifying me during the registration process.
Also I highly recommend LastPass with two-factor authentication using Google Authenticator.
VTFU and thanks for the heads up.
Good to know thanks
Thank you. Voted up.
I have just learnt a lot!
Thanks OP
MentaL, what's up with the git repository?
I am sure they just rushed the registration process to get this out in time and meant no harm, but they should fix it.
bump
.
Wow this is pretty tragic, clear text passwords in this day and age.
Even though the UFC are streets ahead of others sports with regard to tech etc, things like this leave me scratching my head.
GroundStPound - Wow this is pretty tragic, clear text passwords in this day and age.This fucking app had plaintext passwords for the longest time untill I alerted them prior to the update.
Even though the UFC are streets ahead of others sports with regard to tech etc, things like this leave me scratching my head.
GroundStPound - Wow this is pretty tragic, clear text passwords in this day and age.
Even though the UFC are streets ahead of others sports with regard to tech etc, things like this leave me scratching my head.
Seems like they must have rushed it out.
They also have shocking customer support, trying to unlock an account where I entered the password incorrectly is seemingly impossible. Terrible for a paid service.
ttt