| ▲ | waterTanuki 10 hours ago | |
> On Feb. 1, 2025, Muneeb Akhter asked Sohaib Akhter for the plaintext password of an individual who submitted a complaint to the Equal Employment Opportunity Commission’s Public Portal, which was maintained by the Akhters’ employer. Sohaib Akhter conducted a database query on the EEOC database and then provided the password to Muneeb Akhter. That password was subsequently used to access that individual’s email account without authorization. It should be a federal crime with prison time to make a DB for a federal agency and not hash and salt passwords or other auth credentials. | ||