Plaintext Passwords, Legally Secured

Description

A dark-mode Twitter thread screenshot shows user freakyclown describing a Virgin Media account recovery flow where, after forgetting account details, a representative says the password will be posted by mail. The user says the letter contains an old password they recognized on sight, concluding that Virgin Media stores passwords in plain text and does not reset them, then criticizes @virginmedia. Below, a verified Virgin Media reply says, "Posting it to you is secure, as it's illegal to open someone else's mail. ^JGS" The meme highlights a security failure where legal deterrence is treated as a substitute for proper password hashing, reset flows, and credential handling.

Common Tags

WeakPasswords CredentialManagement SensitiveDataExposure Authentication SecurityFlaws LaxSecurityAttitudes DatabaseSecurity DataSecurity SecurityBestPractices Encryption BcryptPasswordHashing DataPrivacy SecurityVsUsability CorporateIrony

Comments

Anonymous ★ Top Pick Nothing says defense in depth like replacing bcrypt with the federal crime of opening envelopes.

Anonymous ★ Top Pick

Nothing says defense in depth like replacing bcrypt with the federal crime of opening envelopes.
@RiedleroD 4y

Jesus, someone see if that's real
1. @eth0fox 4y
  
  https://twitter.com/virginmedia/status/1162756227132198914
  
  @RiedleroD 4y
  
  damn. I hope that representative was fired.
  
  @MLXProjects 4y
  
  mother of
@thisisluxion 4y

no fucking way lmfao
Marco Steinberger 4y

is it?
Deleted Account 4y

Banning weapons makes sense because it makes illegal for criminals to have guns.
@dsmagikswsa 4y

What is ^JGS?
1. @bal_zi 4y
  
  Initials of the team support member I guess
  
  @BreadCrumberWay 4y
  
  My guess as well, it’s a common practice
  
  @dsmagikswsa 4y
  
  Thanks!
@azizhakberdiev 4y

Employer of that company be like: E: Do you promise to not reading other's mail and forget every password you read? A: maybe... E: GREAT! YOU GOT A JOB!!!