plusnet still not hashing passwords

[#1]

What is going on, it's 2015 and plusnet are still not salt and hashing passwords. How does that meet with PCI compliance when they hold and process credit card info? I'm extremely disappointed to find Plusnet have still not addressed the serious failing having just been presented my password in the clear having followed the Fogotten My Password link

[#2]

Interesting. I clicked the Forgotten My Password link and Plusnet sent me a password reminder email.
When I clicked the link in the email it took me to a page displaying my username and password.
To be honest I was expecting a password reset email with a link to a page enabling me to chose a different password.

[#3]

probably because when doing a repair to a fault on your broadband the BTOR operative may have to have your password to be able to log in as you

[#4]

No, that's the purpose of the BT test login credentials!

[#5]

Quote from: Strat

To be honest I was expecting a password reset email with a link to a page enabling me to chose a different password.

Great idea - not!
Would you like to guess how many people would reset their portal password and then find that their broadband connection was dead because the password in the router was wrong? What would make it worse that the broadband would only die when they reconnected which could be many days later so they wouldn't associate the lost connection with the password change.
Only once Plusnet start using different passwords for the portal and the connection authentication would this be a safe (and very good) suggestion.

[#6]

It's fortunate that Plusnet account passwords don't get compromised then.

[#7]

Now that's a better idea, different passwords for the members area and for your broadband log in. Then the member area password can be properly stored as a hash with no need for anyone to ever be able to read it. And there would be no excuse of engeneers might need it. Then add a proper password reset page.