cute_spider_ni_srsly

cute_spider_ni_srsly wrote

Reply to comment by twovests in You're working for a big company making a new service. Requirement: You need to store passwords in plaintext. Resources: As many as you need. What security measures do you take here? by twovests

Here's the basic pitch:

There are two databases for passwords. One of which is turbo isolated and basically is write-only. Besides the fact that you can write the (decrypted) passwords to it, it basically does nothing. When a plaintext password must be recovered from it, it's a whole process with paperwork.

The server which actually does the password validation, account information, and day-to-day tasks which gets interaction from end users, that one does not use plaintext in any way shape or form.

2

cute_spider_ni_srsly wrote

Reply to Cartoon news: Rick and Morty renewed for 70 episodes by Moonside

been listening to harmon's podcast with jessica gao. loved andrew ti (yo is this racist) for years so I was super pumped with their crossover episodes and hints that dan is a fan. andrew is a writer when he's not doing yo is this racist, so i'm really hoping he gets on board for writing rick and morty.

3

cute_spider_ni_srsly wrote

Reply to comment by cute_spider_ni_srsly in You're working for a big company making a new service. Requirement: You need to store passwords in plaintext. Resources: As many as you need. What security measures do you take here? by twovests

Regardless I would attempt to hire as a consultant an architect from Google Chrome team who has worked with this system before. Since you can get your saved passwords plaintext on any Chrome browser that you're logged into and they haven't had a major breach in that system that we know of yet, we should think about what Google does to this end.

2