Database schema = "Not fraudulant", what's so hard about that? Login credentials don't even need to be encrypted if you say no fraud before you log in, and cross your fingers. It's basic programming knowledge, come on man. Also throw some salt over shoulder and slaughter a goat for good measure just in case.

[–] [email protected] 10 points 2 days ago (1 children)

You just describe half of my career. 😅

[–] [email protected] 15 points 2 days ago (1 children)

You joke, but one of the programs at my work we use legit doesn't need credentials, just a username. That one's a head scratcher to me.

[–] [email protected] 2 points 1 day ago

Would that almost be OK if it were like 40 characters long? Like, you can view any photo on Google Photos if you have the right alphanumeric string

Would still be saved insecurely in password managers and other issues though

[–] [email protected] 5 points 1 day ago

Login credentials don’t even need to be encrypted if you say no fraud before you log in, and cross your fingers

Don't forget to unset the evil bit as well!

[–] [email protected] 4 points 2 days ago (1 children)

[–] [email protected] 3 points 2 days ago (1 children)

In plain text I assume right? You're not crazy..

[–] [email protected] 2 points 1 day ago

If they weren't in plain text how could we check to make sure it's still there?