Need Some Advice

4    09 Jul 2015 03:17 by u/yizzlezwinkle

I am a summer intern at a small company. I use sql and mostly work with databases. When I was looking through the database one day, I discovered something extremely alarming: user passwords were stored in plain text. What's the best way to bring attention to this problem without looking like a snoop?

5 comments

1 u/supernatendo 09 Jul 2015 03:18

It depends, are you a paid intern or an unpaid one?

0 u/yizzlezwinkle [OP] 09 Jul 2015 03:19

Paid.

1 u/supernatendo 09 Jul 2015 03:20

I would ask your supervisor for permission to check the database for security issues. If they grant you permission, come back to them a while later with your findings and present a solution. If they tell you they don't want you going through the database looking for security issues, then don't divulge that you have already done so.

0 u/yizzlezwinkle [OP] 09 Jul 2015 03:23

I will keep this in mind. The thing is, my job does not involve security, just utilization of the database.

1 u/14d2025 09 Jul 2015 08:47

First of all, is it production database and as intern do you need access to it?