Hacker News Reader

usenetbucket.com

Usenet provider

Forgot password asks you to type a password, in which it instantly emails back to you in plaintext.

Doesn't mean it stores it in plaintext.

It seems that most of these just send you your password as confirmation (or a temp one after requesting password recovery). Even assuming the best case scenario that these are just password confirmation emails, it still bothers me that my password would now be in my email as plaintext.

Exactly! That's what i thought. Mailing a password to a user on changing it is maybe not the safest, but it does not mean it saves it plaintext to the database. They can just send out an e-mail when updating the password to the database and then never use the plaintext version anymore.

Reply on news.ycombinator.com