DIGIT-ARC read-only archive · snapshot: July 23, 2026

DIGIT-ARC / Bandwidth Wastage / Chit-Chat

wtf? PVR Cinemas doesn't hash + salt the passwords?

11 posts · originally from https://geek.digit.in/community/threads/wtf-pvr-cinemas-doesnt-hash-salt-the-passwords.160248/

skeletor
skeletor Original post #1
Jul 18, 2012 at 2:57 AM
I just recovered my password from PVRCinemas.com. It sends me my old password in PLAINTEXT?

WHY DON'T THEY SALT AND HASH THE PASSWORD?
M
manojkrishnaks #2
Jul 18, 2012 at 10:16 AM
ico said:
I just recovered my password from PVRCinemas.com. It sends me my old password in PLAINTEXT?

WHY DON'T THEY SALT AND HASH THE PASSWORD?
Click to expand...

Not only PVR many other sites like LIC etc send it in plaintext
avinandan012
avinandan012 #3
Jul 18, 2012 at 10:48 AM
i can say one thing about this
NOOB DEVELOPER detected
Faun
Faun #4
Jul 18, 2012 at 11:37 AM
lol..some developers watch the world burn.
Vyom
Vyom #5
Jul 18, 2012 at 2:34 PM
Reasons to hate PVR:

1. Costly Tickets.
2. Small Screens.
3. Send the passwords in PLAIN TEXT!!
:rofl:
Faun
Faun #6
Jul 18, 2012 at 3:00 PM
Their screen was yellowish in hue when the last time I went of Clash of the Titans.
theserpent
theserpent #7
Jul 18, 2012 at 5:04 PM
Ynoob Yindians have developed it?
Desmond
Desmond #8
Jul 18, 2012 at 5:18 PM
Falling coding standards are to blame. The developers need to be aware of possible security issues.
Faun
Faun #10
Jul 19, 2012 at 9:09 AM
^I registered on a custom IEM website yesterday and they sent me the password in plaintext.
H
hjthegeek #11
Jul 19, 2012 at 11:09 PM
I think they haven't learned their lessons from recent big password leaks. I think we should make a list of non encrypted site to make awareness in our users so they will not register on these sites. Also, we can send a email to the site admin about the security concern.