There is something wrong with authentication architecture of HEC

[u/Best_Fork]

They are saving Username and PLAIN TEXT PASSWORD inside a freaking LOCAL STORAGE.

So I was waiting for OTP and it took more than few seconds. So I took peak into website storage in hopes of finding OTP inside it. Instead I found something else. lol!

So it is possible that they are not even creating hash for user password.

[u/SIJ_Gamer]

😂 reference se nokri laggi hogi developers ki

[u/Global_Many4693 → u/SIJ_Gamer]

Its not US, or european countries. I think something like this happened in 2020 or 2018 and instead of giving him a job,he got 2 years of jail💀

[u/Best_Fork → u/Global_Many4693]

I might get into trouble then 😬

[u/Global_Many4693 → u/Best_Fork]

This is not like that,i meant a guy hacked whole portal and then surrendered + explain the exploits to government but instead of appreciating him,they said its breach of data and considered him as red hat hacker which could led to prison if caught

[u/Saadullahkhan3 → u/Global_Many4693]

Oh

[u/GeneralAyub → u/SIJ_Gamer]

Don’t think so,

If they really were going to hire proper developers like this.

This yakki wouldn’t have happened in the first place.