• bufordt@sh.itjust.works
      link
      fedilink
      arrow-up
      10
      ·
      1 year ago

      When we first switched to JD Edwards, it still sent the passwords in plain text, and our Oracle partner set up our weblogic instances over http instead of https.

      I had to prove I could steal passwords as just a local admin on a workstation before they made encrypting the traffic a priority.