Reply to thread

Message: [QUOTE="dmorris68, post: 2451529, member: 40397"] It's a sign of very poor system design (and business practices) but unfortunately it's not as rare as it should be. Some sites have really crappy systems or procedures to verify customers. It's probably even worse in that they store your password in plain text so they CAN verify it -- which means there's no point in not giving it to them, because they already know what it is. They're just trying to confirm that you do. Businesses using proper security protocols wouldn't even be able to verify your password, because they wouldn't be able to see your password. Proper procedures include storing a one-way hash of your password such that it can never be reversed back to clear text. Identity should be verified by security questions and/or specific account details such as mailing address, phone#, SSN, etc. This site has always sounded like a cut-rate joint anyway, and this confirms it, but they're by no means unique in having a technically crappy design and being out of touch with modern security protocols, even among poker sites. In the rush to jump on the poker boom and make lots of moniez, many prudent practices were ignored, mainly because most sites were founded by non-programmers or amateur programmers, or used cheap contract talent to develop their code. Only after security breaches, cheats, and hacks started running rampant did things start tightening up. I remember the earliest days of online poker, when client/server communications were completely unencrypted (to include passwords), to everybody's hole cards being transmitted in the clear to each client at the start of a hand (that was quickly exploited and corrected), to the server backdoors at AP/UB, to the fairly recent incident of weak and easily decrypted XOR-based encryption that Cake network was using long after others had adopted SSL, the industry standard for encryption. So things have come a long way, but there's still work to be done obviously. [/QUOTE]

Verification

Search

Reply to thread

About CardsChat

Our Community

Our Site

Follow us

Language