<story><title>Elsevier Left Users’ Passwords Exposed Online</title><url>https://motherboard.vice.com/en_us/article/vbw8b9/elsevier-user-passwords-exposed-online</url></story><parent_chain><item><author>ddavis</author><text>Add it to the list of reasons to be unhappy with Elsevier. The article makes it sound like passwords are stored in plain text. What a disaster of a company.</text></item></parent_chain><comment><author>cjbprime</author><text>Kibana&amp;#x27;s a monitoring system, so the article makes it sound like the passwords were ingested into logs on their way to presumably sit hashed at rest for the systems that they were intended for.&lt;p&gt;Which means there are really three red flags: internal tools deployed to the public internet, internal tools without any user access control, and allowing passwords to hit the logging infrastructure.</text></comment>
<story><title>Elsevier Left Users’ Passwords Exposed Online</title><url>https://motherboard.vice.com/en_us/article/vbw8b9/elsevier-user-passwords-exposed-online</url></story><parent_chain><item><author>ddavis</author><text>Add it to the list of reasons to be unhappy with Elsevier. The article makes it sound like passwords are stored in plain text. What a disaster of a company.</text></item></parent_chain><comment><author>RosanaAnaDana</author><text>I know its petty, but any reason to pour the hate onto Elsevier makes me a happy. I do my utmost to never have to rely on publications only available through them as a resource and it has definitely shaped the focus of my research (if there is any barrier to getting a publication, I&amp;#x27;m far less likely to use it or rely on it).</text></comment>