ABSTRACT

In the second of our Hack Labs, we investigate the unfortunate practice throughout the Internet of registering for some account on the Internet, which then requires the user create a password or have a password assigned—but in either case, the entity or company assigning the password sends it to the user by email “in the clear,” that is, in a readable form to anyone who looks over the user's shoulder or taps that information online.