Hacker News new | ask | show | jobs
by humblepie 1877 days ago
Accenture built the PRESTO system (payment card for Toronto transit) and of course they store plaintext passwords (https://www.reddit.com/r/toronto/comments/1subk4/presto_card...)
2 comments

And for a bit of a citation:

https://en.wikipedia.org/wiki/Presto_card

And from personal experience:

Jesus wept, Presto was a truly awful rollout, not least of which was the awful UX/UI of the terminals at the stations.

Oh, and of course, in 2021, you still cannot tap-to-pay using NFC on your phone. Now, that may not be Accenture’s fault; that could obviously and easily be the failure of sclerotic Canadian bureaucracy. But I would not be surprised if the back end simply does not support such a thing without another $50 million in consulting fees.

As I am told very often on HN, security is expensive. It is expensive to use an off the shelves password hashing algorithm, or to use parameterized SQL queries...
Yes, in Computer Science, using parameterized SQL queries is considered a Hard Problemâ„¢. /s