Hacker News Reader

Comment by kylebragger | Hacker News Reader

Ah, so it's a BB app which I guess I photograph the receipts with? Also, not digging the password via email thing.

Not sure how it shortens my signup, but interesting point re: the "share" feature. At first glance made me think "oh I hope they're not storing passwords in plaintext".

Don't worry. We aren't storing anything in plaintext. SHA-1 with a 256-bit salt.

Sorry, I was a little confused about the password-via-email comment. No, it doesn't shorten your reg. Only the share. We include the password for easy record-keeping for users. Also, we don't keep anything of value on JTB. It is just receipts. No bank account numbers or CC numbers. Just like a paper receipt.

You're still sending the password I entered back to me in an email in plaintext, even if you're not keeping it.

This is considered horrible practice.

I was excited about your product until I received an email with my password in it.. it just killed my enthusiasm. At some point I'll look back, but for a site that stores financial data...kinda scary.

Awesome, thanks for the clarification.

We like the PW via email to shorten the registration process.

Also, it lets us make the 'Share' button much more powerful. This way, we can have someone share an account with a friend and deliver them a fully functional account with no signup.

Personally it freaks me out that someone can create am account on my behalf. I don't like that. But i'm sure your user experience researh has shown you that I am in the minority, soi guess I just have to deal with it.

Reply on news.ycombinator.com