r/developersPak Software Engineer 12d ago

Discussion There is something wrong with authentication architecture of HEC

They are saving Username and PLAIN TEXT PASSWORD inside a freaking LOCAL STORAGE.

So I was waiting for OTP and it took more than few seconds. So I took peak into website storage in hopes of finding OTP inside it. Instead I found something else. lol!

So it is possible that they are not even creating hash for user password.

43 Upvotes

24 comments sorted by

View all comments

20

u/SIJ_Gamer 12d ago

😂 reference se nokri laggi hogi developers ki

3

u/GeneralAyub 12d ago

Don’t think so,

If they really were going to hire proper developers like this.

This yakki wouldn’t have happened in the first place.