Let's play a little game. I have a list of websites below and what I want you to do is decide whether you think each is safe or not to use (ie. would you login, make purchases from, use their services, etc...). Maybe they look reputable? Maybe you've heard of them before? Maybe you'd expect it to be? You can determine this however you like, which means you don't have to click on any either. I haven't used any URL shortening services nor any forum trickery. The URLs are all posted with [url] tags.
Ready?
1. [url]http://www.du.edu/[/url]
2. [url]http://conduit.com/[/url]
3. [url]http://www.travelocity.com/[/url]
4. [url]http://www.drugstore.com/[/url]
5. [url]http://www.tix.com/[/url]
6. [url]http://mcn.fantasyleague.com/[/url]
7. [url]http://www.jabber.org/[/url]
8. [url]http://nic.io/[/url]
9. [url]http://www.findtuition.com/[/url]
10. [url]http://www.dwyer-inst.com[/url]
11. [url]http://www.tesco.com/[/url]
12. [url]http://www.streamline.net/[/url]
13. [url]http://cvpcorp.com/[/url]
14. [url]http://www.rivosafeguard.com/[/url]
15. [url]https://www.politicopro.com/[/url]
16. [url]http://www.creation.co.uk/[/url]
17. [url]http://www.gourmetads.com/[/url]
18. [url]http://www.mgid.com/[/url]
19. [url]http://www.cdkeys.com/[/url]
20. [url]http://www.flynumber.com/[/url]
21. [url]http://phoenixpubliclibrary.org/[/url]
22. [url]http://www.uk.capgemini.com/[/url]
23. [url]http://thedma.org/[/url]
24. [url]https://www.dmachoice.org/[/url]
25. [url]https://www.ventrachicago.com/[/url]
26. [url]http://ptcb.org/[/url]
27. [url]http://accela.com/[/url]
28. [url]http://www.interparcel.com/[/url]
29. [url]http://talongungrips.com/[/url]
30. [url]http://www.limelight.com/[/url]
Done? Click below.[spoiler]They're all unsafe. Really.
All of these websites store your passwords in plaintext. Meaning, anyone who has access to the database (including if it's compromised like Snapchat or Sony Pictures' were) can read them.
Were you surprised by any that you thought were safe?
Sources: [url]https://defuse.ca/password-policy-hall-of-shame.htm[/url], [url]http://plaintextoffenders.com/[/url][/spoiler]
-
Shit, I just signed up for all of them and I used my SS as my password...
-
I generally use "WoT" or "Web of Trust" to avoid bad sites. It's an add on where everybody rates the trustworthiness of the site. I'd imagine they would respond with what's what. :)
-
-
Thanks for the PSA, a lot of people don't realise what they're getting into most of the time.
-
No I won't use these websites.
-
travelocity? damn it.
-
Edited by Rampant: 1/21/2014 1:04:24 AMI'll just check [url=http://www.xbox.com]xbox.com[/url]
-
So how do we know if a site we normally frequent and use, like a university webpage, is more secure than these sites you listed?
-
-blam!- I've used cdkeys.com before. At least I no longer have that CC and I always use a specific email for buying shiz online.
-
So none of them use hashing or salting? What is this 1990!?!
-
[quote]21. [url]http://phoenixpubliclibrary.org/[/url][/quote] Hey, this is my library.
-
How do we know clicking those links won't infect our computers?
-
As I was going down the list, I thought none of them because I have no clue what some are, and refuse to buy from random sites. Glad to see I was right. Also, I'm pretty sure you should avoid sites that lack an HTTPS in the url when you log-in.
-
Edited by Progo: 1/20/2014 4:32:07 PMI only allow my financial information on very reputable sites, such as Amazon. Everyone else I manage through PayPal if possible, even though I'm not a huge fan of PP. Which means those sites are given my "tertiary passwords" which will not give them access to anything important.
-
[quote]All of these websites store your passwords in plaintext[/quote] so like if I did inspect element on chrome would I be able to see my password?
-
Why would ANY website not encrypt.
-
Edited by FatherlyNick: 1/20/2014 4:20:29 PMHow hard is it to hash stuff? See this is what happens when you hire those 'java crash course' programmers to work for you, they might pass the interview questions but their wider knowledge is so limited! This is unbelivable!
-
I accidentally clicked the spoiler so I ruined the validity of my answer :(
-
We only know if a site is safe to use if there is Daz there.
-
So...no encryption...whatsoever?! I was shocked enough when Adobe was discovered only using symmetric encryption...
-
If I'm not sure about a link, I boot up my VM and check it.
-
I thought that all .edu sites were okay.
-
This really makes me worried. I might go change all of my passwords now.
-
For safe internet I use a condom. Magnum size of course
-
They all look fine, I mean this one is downloading an anti phishing program which is always nic... *computer explodes*
-
Isn't conduit a virus?