Google uploading your plain text passwords

Sat Jun 12 17:21:32 UTC 2021

>
> They
> snuck it on me.
>

"I didn't notice this until now" != "They snuck one by the goalie."

On Sat, Jun 12, 2021 at 10:30 AM William Herrin <bill at herrin.us> wrote:

> On Sat, Jun 12, 2021 at 5:11 AM K. Scott Helms <kscott.helms at gmail.com>
> wrote:
> > Encryption != plain text, just because it's not a hash doesn't mean it's
> problematic (if done correctly).
>
> Scott, Google's computer is able to compose an html document which
> contains my passwords in plain text. Whatever dance they do to either
> side of that point in their process, at that point they possess my
> passwords in plain text. Why is this concept a mystery to anyone?
>
>
> > This is the exact same method that every single password management
> system uses and all are far better for the average user than trying to
> reuse a single password or write them down.
>
> If I had authorized it, it would indeed be just like any other
> password managing web site. I did not knowingly authorize it. They
> snuck it on me.
>
> Regards,
> Bill Herrin
>
>
> --
> William Herrin
> bill at herrin.us
> https://bill.herrin.us/
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20210612/1e2435df/attachment.html>