Nice security holes you've got there.

Post Reply New Topic

The first thing I notice when I register is that the CAPTCHA this site uses can be read by an optical character recognition program that you can download for free just about anywhere. The whole point of making users put in random numbers and letters (although when I registered it was just numbers) is to prevent bots from creating accounts. If you don't make sure that your CAPTCHA is unreadable by those bots, then there's no point in using one at all.

So I register, and in my email is the Welcome notice. And guess what? It contains my username and password, there for anybody who steals my email password to see! I deleted it and then emptied my trash, but I pity the poor fool who doesn't take that precaution and gets his account on this site taken over by a troll.

Seriously, am I the only person whose OCD manifests in paranoia about things like this? It may be paranoia, but at least it means I take extra steps when I can to make sure that security holes like this don't happen.

They'd have to hack your email account first. If you're worried about it, just delete it. They'd know your password anyway if they just hacked into your email after requesting a change of password on WP.

Nothing to worry about, imo.