FTC Fines RockYou $250,000 For Storing User Data In Plain Text

[Daniel]

You probably don't remember the RockYou fiasco as it happened in late 2009. In case you don't, social game developer RockYou suffered a serious SQL injection flaw on its flagship website. Worse, the company was storing user details in plain text. As a result, tens of millions of login details, including those belonging to minors, were stolen and published online. Now, RockYou has finally settled with the Federal Trade Commission.

http://www.zdnet.com/blog/security/...000-for-storing-user-data-in-plain-text/11274

 

[JGM]

Why hasn't the same thing happened with Sony then when they were hacked? All the logins were again stored in a non-encrypted fashion?

JGM.

 

[Daniel]

"As a refresher, here were the top 10 passwords used by RockYou users: 123456 12345 123456789 Password iloveyou princess rockyou 1234567 12345678 abc123" Very original!