• bufordt@sh.itjust.works
    link
    fedilink
    arrow-up
    2
    ·
    1 year ago

    When we first switched to JD Edwards, it still sent the passwords in plain text, and our Oracle partner set up our weblogic instances over http instead of https.

    I had to prove I could steal passwords as just a local admin on a workstation before they made encrypting the traffic a priority.