DEV Community

Discussion on: What are the worst security practices you've ever witnessed?

Collapse
 
danjconn profile image
Dan Conn

Another one is storing passwords as Strings in your favourite backend language! Strings often stay in memory as constants so can be retrieved in an attack, however if stored as a byte array, and set to null after use, it's then gone immediately.