Hacker News Reader

Creating an FAQ for these companies would be useful.

Something to arm the devs who work at these places with something when they go to management who's reaction is "yeah I know it's bad.. but... like, we have important shit to do."

View on HN

What would you suggest?

Assume the company is unaware that their developers have implemented the password this way. The FAQ for the company should highlight the exceptionally high cost of losing customer data, the distraction for their team from dealing with any breach, and the incredibly low cost of making the fix. The call to action could be for them to email their developer a link to your dev FAQ, demanding a fix.

That's a great idea! I'll add "I've been listed! What do I do?" to the FAQ. Thanks!

Reply on news.ycombinator.com