Specops Software, a password manager, and authentication solutions vendor published a new report this week disclosing that e-commerce giant, Shopify with more than 3.9 million live websites globally, employs weak password policies on the user-facing section of its website.
To create a Shopify account, users only need to create a password that is at least five characters in length and that does not begin or end with a space.
Threat analysts at Specops examined a list of a billion breached passwords and unearthed that nearly every (99.7%) of those passwords comply with Shopify’s requirements. However, this does not mean that Shopify customers’ passwords have been breached, in fact, it only highlights the threats linked with using weak passwords.
Shopify headquartered in Ottawa, Ontario was founded in 2006 by Tobias Lütke, Daniel Wenand, and Scott Lake following the trio’s failure to find a suitable off-the-shelf e-commerce platform for a planned snowboarding store, Snowdevil.
<
[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.
This article has been indexed from CySecurity News – Latest Information Security and Hacking Incidents
Read the original article: