Pandora Security Vulnerability Puts Some User Passwords At Risk [Update: Pandora Says Fix Coming]

There are reports circulating related to the security of users' Pandora passwords. It's not a password leak or an attack, however, but there's concern that passwords aren't being well secured on users' computers. Initially, word was that Pandora was storing cleartext passwords (meaning unencrypted) directly on users' hard drives, which would have been a major concern. Specifically, those passwords are being stored in the HTML5 local storage area for the www.pandora.com website. However, it appears that the passwords aren't?being stored in cleartext, but are encrypted using a single static encryption key which is the same for all users. While that's a step up from the earlier, more concerning situation, it's still a risk.

Source: http://feedproxy.google.com/~r/Techcrunch/~3/cu4CpGqZO-A/

larry the cable guy miracle on 34th street santa tracker monkey bread letter from santa sweet potato pie sweet potato pie