Hacker News Reader

Tried to signup... it said I already had an account.

Did a password reset... it emailed me a new password in cleartext.

Clicked on the login link... Bad Gateway.

Hi binary,

I got your points. We had a short outage that has been restored in a flash. +90% of our users login with Google so password reset has been developed just to give users the possibility to re-enter and define a new one of their choice.

But does this mean you are storing passwords in cleartext?

That is not what he said, they send a mail with the new password, so that doesn't mean they store the passwords in plaintext (not cleartext).

It just generates a password, mails it and then (probably) encrypts it.

Ah, apologies. Misread.

Still could be better, though - with a reset link that then creates a new password.

Reply on news.ycombinator.com