Hacker News Reader

It's quite easy to come up with a scheme to manipulate the password client-side. I'd assume an organization with any technology credence whatsoever knows not to store unencrypted passwords by now.

View on HN

The problem is that these passwords are used on everything from printer services to cisco vpn access to federated network ("eduroam") where "client-side" isn't somethin McGill controls.

McGill does some beautiful IT admin stuff. And then it does some scary-ass shit like this.

take a look at pearson's blackboard, they store passwords in plain text.

I'd really rather not. Blackboard has a reputation among students and faculty alike for being nigh-impossible to understand.

Pearson does this in all of their services.

i know, mymathlab as well.

Reply on news.ycombinator.com