well of course, but anywhere where passwords are lying around in plaintext are troublesome if something is compromised (its happened to my email once). and also the untrustworthy admin thing :-p
well, yeah sorry i implied the 'and must be a mod/admin thing as well' :-p
im saying it could further give it out if its coupled with the whole compromised thing above. youd think this would be some sort of safeguard against logins who arent you, whereas its undetectable and yet posts your password in plaintext somewhere :-p hence the possibility of being negative on the whole.
im just helping to examine some vulnerabilities which can (and for me, have) arise
|