Open letter to Monster.com

[luno]

I wrote the following in the comments box this morning. We'll see if I get a reply...

As a network security engineer, I'm amazed that Monster would be so foolish as to store clear text passwords in its database. There's absolutely no reason or excuse for doing that

Comments

[tmtl]

Well done?

[kalium]

At this point, MD5 can't really be considered a secure hash for passwords. At least, not without salt.