WARNING THIS EXCHANGE HAS A SERIOUS SECURITY ISSUE
I registered to this site and got an email
WITH MY PASSWORD INSIDE IN PLAIN TEXT!This is a SERIOUS security issue, as it shows that
1) This exchange is storing passwords in plain text somewhere on their database.
2) They don't realise how terrible the practice of emailing users their passwords is
Be very careful and request that the developers confirm their password security practices. We do not want another compromised exchange that leaks users' passwords to the world.
When I contacted the developers on the issue, they basically snobbed me off and didn't listen, his final message to me was:
ok, well, i'm going back to bed. got a phone call waking me up about this. you can leave messages here
This is after I pointed out
three vulnerabilities with the exchange within 10 minutes of looking
If you plan on using this exchange, please proceed with
EXTREME caution. Too many people are being compromised these days