Latest in Culture

Image credit: Lichtmeister Photography Productions e.U. via Getty Images

CNBC taught a horribly botched lesson in password security

It did teach you how to easily leak those passwords, though.
2 Shares
Share
Tweet
Share
Save

Sponsored Links

Lichtmeister Photography Productions e.U. via Getty Images

CNBC just learned a hard, hard lesson about password security. The news outlet posted (and promptly took down) an article on the subject whose centerpiece was a "how strong is your password?" text entry box that, if anything, was a classic example of how not to manage those all-important logins. For a start, Google's Adrienne Porter Felt noticed that the box sent your password unencrypted, guaranteeing that any snoop could intercept it and test it against your real accounts. To make matters worse, others discovered that the site sent the password to not just a Google Docs spreadsheet, but to multiple third parties -- when CNBC said "no passwords are being stored," it was flat-out wrong.

Things wouldn't have gone well even if the text field was airtight. The tool appeared to underestimate how long it would take to crack passwords, potentially lulling you into a false sense of security. In fairness, CNBC is aware of what happened and is spending time improving the tool. The real question is why the initial version didn't appear to get serious scrutiny before it went live -- if you're going to educate the public about the value of good security, you need to practice what you preach.

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
2 Shares
Share
Tweet
Share
Save

Popular on Engadget

The best consoles, games and accessories for students

The best consoles, games and accessories for students

View
Divorce dispute leads to accusation of crime in space

Divorce dispute leads to accusation of crime in space

View
OnePlus 7T might pack a wide-angle camera

OnePlus 7T might pack a wide-angle camera

View
Scientists bioprint living tissue in a matter of seconds

Scientists bioprint living tissue in a matter of seconds

View
CDC identifies a death potentially linked to vaping

CDC identifies a death potentially linked to vaping

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr