The BizBuySell Small Business Community

  • Get Expert Advice

  •  • Find Local Service Professionals

  •  • Share Your Experiences

Can BizBuySell update its website security? The forgot your password email proves they are not encrypting our

I just did a password reset and the email sent to me lists my password letter for letter. Since I do Mergers and Acquisition work for B2B Information Security, I know this is proof that passwords are not hashed -- because it would be impossible to tell me what my password was if they did.

So, BizBuySell itself as a site has a website programmer engaged in Stinky Security practices. This leaves me concerned about my password and also what other low levels of trust BizBuySell has created by skipping steps.

Have any of you notice whether BizBuySell is skipping other important steps?

No User Photo

Answer This Question

max 5000 characters

Web Reference (optional)

e.g., "www.mywebsite.com"

Review Community Guidelines

Help keep our Community clean and on topic. The BizBuySell Community is a place where you can discuss your questions, concerns and knowledge with others you can trust. It is not OK to use this forum to solicit others for personal or financial gain, or to rant about personal issues. It's all in the guidelines.

Submit Your Answer
Answers (5)
No User Photo
Maricopa County, AZ

Is it even possible to give a date on when you might even have a date to make the change?

Oct 30, 2014
No User Photo
Maricopa County, AZ

I wish I could sugar coat this, but while delay occurs, my account remains at risk and BizBuyPlay -- effectively holds that unjust risk to my online information is an acceptable risk. The following is a plain language translation of the excuses provided.

Since no change is possible without a plan. Perhaps BizBuySell should cease to lie to itself about its Security Plans. Further, claiming one is working hard on Security without actually bothering to do it, is a lie to your customers also.

Oct 30, 2014
No User Photo

A firm release date has not yet been determined.

Oct 30, 2014
No User Photo
Maricopa County, AZ

On what date can I expect my password to no longer be exposed by bad website programming practices? What is the release date of the update?

Oct 29, 2014
No User Photo

Hi Don,

BizBuySell is hard at work at improving all levels of security and plan on releasing a comprehensive confidentiality system inclusive of password protection. Thank you for sharing your concerns.

Della Rahbek
BizBuySell

Oct 29, 2014

Start a Discussion