I just found out a website is storing my password in plaintext, what should I do?

You should ABSOLUTELY tell the school, and the owners of the website.

This is a HIGHLY important issue, as it relates to people's valuable personal information.

If they try to ridicule you, or intimidate you for bringing it up...

You can let them know that they are WRONG for dismissing your concerns, and that you intend to elevate this, and even alert the news media if you have to, to protect yourself, and everyone else's personal data.

In the end, what's the worse they can do to you?

Try to kick you out of the school? If so, and you went to the media, that would look really great for them:

Kicking out a computer science student, for sounding the alarm on a critical computer-science security issue!

You could likely file a big law suit against the school, if they kicked out a computer science major student for that reason!

/r/hacking Thread