Storing passwords in plaintext online is never a good idea, but it’s remarkable how many companies have employees who are doing just that using online collaboration tools like *Trello.com*. Last week, KrebsOnSecurity notified a host of companies that employees were using Trello to share passwords for sensitive internal resources. Among those put at risk by such activity included an insurance firm, a state government agency and ride-hailing service *Uber*. By default, Trello boards for both enterprise and personal use are set to either private (requires a password to view the content) or team-visible only (approved members of the collaboration team can view). https://urldefense.proofpoint.com/v2/url?u=http-3A__bit.ly_2riDJBU&d=DwIFaQ&c=pZJPUDQ3SB9JplYbifm4nt2lEVG5pWx2KikqINpWlZM&r=b5NZPQUb9_r2rQ3Zd74ATT3aSs9yKyRnJLOhqJvd7fE&m=hTlKDeBU6n-0WJ3rOw05euWlU3SwmfvUs9aohrCCHjs&s=wEO--Zm7O0U71T1H2MejcuqEfurx4zzpyj3XMAjpRQw&e= https://urldefense.proofpoint.com/v2/url?u=http-3A__bit.ly_2riDJBU-2B&d=DwIFaQ&c=pZJPUDQ3SB9JplYbifm4nt2lEVG5pWx2KikqINpWlZM&r=b5NZPQUb9_r2rQ3Zd74ATT3aSs9yKyRnJLOhqJvd7fE&m=hTlKDeBU6n-0WJ3rOw05euWlU3SwmfvUs9aohrCCHjs&s=EXpvfitGxU6C-WiY5E2-Xi7-UajYSt8CVdl88bITT88&e= -- Peterk Dallas, Tx [log in to unmask] Save our in-boxes! https://urldefense.proofpoint.com/v2/url?u=http-3A__emailcharter.org&d=DwIFaQ&c=pZJPUDQ3SB9JplYbifm4nt2lEVG5pWx2KikqINpWlZM&r=b5NZPQUb9_r2rQ3Zd74ATT3aSs9yKyRnJLOhqJvd7fE&m=hTlKDeBU6n-0WJ3rOw05euWlU3SwmfvUs9aohrCCHjs&s=y03k1NNjgcftroQdkm8V87Gnu-ALQb0vT3X7QGd9zW8&e= “If only there were a massive entity that I were forced to fund to tell me how I should live my life, since I’m so obviously incapable of deciding for myself.” M. Hashimoto List archives at http://lists.ufl.edu/archives/recmgmt-l.html Contact [log in to unmask] for assistance To unsubscribe from this list, click the below link. If not already present, place UNSUBSCRIBE RECMGMT-L or UNSUB RECMGMT-L in the body of the message. mailto:[log in to unmask]
