Source
ew73•

I find it beyond awful that T-Mobile stores users' passwords in plain text as the article implies (the ability to send someone their password means they have the ability to decrypt your password).

That they're sending it over a such a wildly insecure method as email means they don't give two shits about actual security.

10
InspirasionTruly Unlimited•

Well, I suppose I could call T-Mobile and read them my credit card information over the phone, but I’m not an animal.

Bitch moar please.

Do I think she makes some valid points? Yes. T-Mobile's prepaid MIM plans should not send passwords in the clear (I've done this a few times with my 200MB tablet prepaid plans).

Do I also think she is over-entitled? Definitely. Oh no..I can't CALL them to give them my credit card information? Really? Company gives away something 100% FOR FREE, and she still finds a way to make excuses.

5
Sinasis•

She? It's a guy.

Also, if you're going to offer a service, make sure it functions correctly. Doesn't matter if it's free or not, if your service doesn't function correctly, don't offer it.

5
InspirasionTruly Unlimited•

My apologies. I assumed it was a woman by the name and other posts.Did you even read the post?

The "service" itself functions fine. It continues to function fine..the 200MB auto-renews automatically, whether or not you choose to log into your account or not. He already contacted support by phone to have engineering try to change his password. He's being an entitled prick by saying he can't provide his credit card information over the phone.

Coding errors happen and I see his discussion with @TmobileHelp on Twitter. That's great he's a computer engineer and I can sympathize with him when I see programmers make mistakes that break functionality. But his "bitch and whine' is completely unjustified in this matter.

-3
basaltOP•

(I am not the author.)

2
nerdfacenyanT-Mobile Employee•

Just saying, this is incredibly easily solved by doing a number change on the account, and iirc they're doing away with the MIM system very soon anyway.

2
WIrunner•

I know that there is a desire to keep one's data secure, but this is a mobile phone site, not an banking site where one is dealing with multiples of billions of dollars. A 16 character password seems a bit excessive, especially after a few wrong answers the site locks you out.

And they can just call to do a plan change, probably would've been easier than anything.

0
basaltOP•

When passwords are done properly, via hashing, then the input password length can be arbitrarily long because the result of the hashing, which is stored on the server, is a fixed length.

4