I just recieved an e-mail from you reminding me that my account is still active. This makes sense and didn't bother me initially as it's been a while since I last used it. What really bothers me though is that my username and password were in this e-mail, in plain text. Seriously guys, don't you think that's just a little bit insecure? I already know my username and password so why would I want them to just appear in my e-mail out of the blue? It also bothers me that you're actually storing unencrypted passwords (or passwords with reversible encryption) in the first place, since anyone with half a clue about security would be storing the passwords using a one-way hash (e.g. MD5) so it is very difficult to get the original password back.
ehhhhhhhhh......................................................... When you sign up for aD you are supposed to use your own personal email account! In plain english, an email account that only you know the password to. There is no security risk here at all, if someone had access to your email account they could simply go to the password retrieval page to get the password sent to that account, thats the same with emmm, about 98% of sites that offer password based membership. So unless you are a very insecure person yourself, there is no risks in the account details email. _ _X_X_X_X_X_[small]http://www.BillLonero.com - Check out a true artists music! aD channel on IRC: irc.addictz.net #ad_buddies Newbie IRC Guide- http://forums.afterdawn.com/thread_view.cfm/47221[/small]
