Web Hosting Talk : Web Hosting Main Forums : Cloud Hosting : Rackspace Cloud Server storing passwords in clear

[oldunis]

Just read this blog: http://rondam.blogspot.com/2010/03/d...ace-cloud.html

I would like to have someone from Rackspace explain a bit ...

[Dan-CKS]

wow, i would expect better from rackspace.

[jweeb]

not surprising as well. they would need the passwords to access your account to provide support.

[peterlouis]

well, this doesn't mean that they are storing passwords 'in the clear'. The CSR is unlikely accessing the database directly (my password is "; DROP TABLES;")

I do find it unsettling that they ask for your password over the phone and the application the CSR uses shows the password in plain text.

[devonblzx]

This doesn't prove anything. If passwords are set in encryption it would be simple enough for them to enter it somehow to check it very fast. The support tech may just not have understood what the person was asking.