My Uniden Insecurity

[CQ]

Log into this one.

https://www.yaesu.com/jp/en/wires-x/user/index.php

 

[Fidgety9996]

WRONG. Having your password emailed to you in the clear does NOT mean that the password is stored on Uniden's server in the clear.

It means that either it is stored in plaintext or is encrypted using symmetric cryptography.

Please see my answer here http://forums.radioreference.com/un...curity-contact-my-uniden-com.html#post3022945

Uniden seems to be far behind what is a standard in todays security which would be reasonable hash algorithm + long salt or Bcrypt.

 

[noaim]

all this back and forth about how its stored is not even the real problem IMO

passwords shouldn't be sent in email period. Email is not secure unless you setup a secure server like zix or something.

Having it come in email is more of a problem IMO as email is hacked all the time

 

[mule1075]

all this back and forth about how its stored is not even the real problem IMO

passwords shouldn't be sent in email period. Email is not secure unless you setup a secure server like zix or something.

Having it come in email is more of a problem IMO as email is hacked all the time

A temporary password sent is fine. Just change the password after you log in. Problem solved.

 

[Fidgety9996]

A temporary password sent is fine. Just change the password after you log in. Problem solved.

Well guys are right, sending password in the email is unacceptable.