Unclear on this "security" thing

[jducoeur]

A followup warning about my previous post about the recently-available book: I just noticed the acknowledgement of my new account with Oxbow Books (the bookseller with the sale). The acknowledgement email contains both my registered email address *and password* in plaintext. *headdesk* And AFAICT, they don't allow you to make a purchase without opening an account.

I'd be a lot more annoyed if LastPass hadn't gotten me into the habit of using a different password for every site. (And if waks.org didn't allow me to use a different email address for each one.) As it is, I'm glad I didn't let them save my credit card info, if they're this clueless about elementary security. If you do buy through them, I strongly recommend using a password that you don't use anywhere else important...

Comments

[talvinm.livejournal.com]

If somebody DOES get compromised, I could see a potential lawsuit. "Lack of due care, etc." I am sure the bar is pretty high for that sort of suit, but passwords in plain text? Yeah, that would probably make it past a judge and jury.

Wow.