RCN Stores Customer Passwords in Plain Text

guest · Sep 24, 2018

RCN Stores Customer Passwords in Plain Text
Report by customer who had the password read over the phone
September 24, 2018
https://news.softpedia.com/news/rcn-stores-customer-passwords-in-plain-text-522867.shtml

According to the rep's tweet, "agents need to see this password to verify account ownership when certain changes are requested."

The customer service rep on the other end of the phone told him that the password to his new account is the one from his old one, reading it over the phone, from RCN's database.
RCN customers are advised to enable two-factor authentication wherever possible to protect themselves in case of a data breach
This is not the first time RCN customers have reported about having their passwords sent in in plain text. In 2016, RCN sent an e-mail containing the password needed to login in their MyRCN account in plain text to one of their clients, as confirmed by a screenshot available in a post on Plain Text Offenders.

The issue here is that a plain text database of usernames and passwords not only breaches the customer's privacy, but it also puts them in danger seeing that any security breach of RCN's database can lead to other online accounts owned by the clients being compromised, especially in case of password reuse.
Click to expand...

mirimir · Sep 24, 2018

In 2018, that's almost unbelievable. Password hashing with salt has bee standard practice for decades.

Log in or Sign up

RCN Stores Customer Passwords in Plain Text

guest Guest

mirimir Registered Member

Log in or Sign up

RCN Stores Customer Passwords in Plain Text

guest Guest

mirimir Registered Member

Useful Searches