Pandora Security Vulnerability Puts Some User Passwords At Risk [Update: Pandora Says Fix Coming]

There are reports circulating related to the security of users' Pandora passwords. It's not a password leak or an attack, however, but there's concern that passwords aren't being well secured on users' computers. Initially, word was that Pandora was storing cleartext passwords (meaning unencrypted) directly on users' hard drives, which would have been a major concern. Specifically, those passwords are being stored in the HTML5 local storage area for the www.pandora.com website. However, it appears that the passwords aren't?being stored in cleartext, but are encrypted using a single static encryption key which is the same for all users. While that's a step up from the earlier, more concerning situation, it's still a risk.

Source: http://feedproxy.google.com/~r/Techcrunch/~3/cu4CpGqZO-A/

tim howard goal ben gibbard nfl playoff schedule tim howard scores nick cannon kidney failure consumer financial protection bureau casey anthony video