Independent researcher finds that SEDC, which claims to provide billing software to 250+ US utility companies, was storing customers' passwords in plain text (Jim Salter/Ars Technica)

Jim Salter / Ars Technica:
Independent researcher finds that SEDC, which claims to provide billing software to 250+ US utility companies, was storing customers' passwords in plain text  —  “It's ridiculous vendors are replying to researchers via general counsel, not bug bounty.”  —  In September of 2018 …

from Techmeme https://ift.tt/2Tgc6Zt
https://ift.tt/2IDIHEF February 26, 2019 at 05:35PM https://ift.tt/gaIxo5