Hacker News new | ask | show | jobs
by newman314 5006 days ago
Oh come on.

IFTTT does the same exact thing for some of their "connectors" services. Maybe you should go after them to.

Where IFTTT fails is that they have not IMO adequately explained just how they store these passwords.

http://www.quora.com/How-does-ifttt-securely-store-passwords...

Don't just read some web article talking about "always hash passwords" and repeat it as mantra. This is good practice for 90% of the time but there are definite use cases where having reversible encryption of passwords is necessary.