ArbiterSports Security Issue

[bossman72]

All,

Please make sure your ArbiterSports password is different from all other passwords you use (especially RefPay).  Arbiter stores their passwords in plain text on their server.  I've let them know about this security vulnerability several times but they have not corrected the issue.

The reason I can tell they haven't corrected it is because I got invited to a new Arbiter assigning account, and my password is right there in the email.

So, please keep your password different on Arbiter than you use on other sites.

[HLinNC]

Wow, whos their IT consultant, Hillary Clinton?

[bossman72]

Looks like Arbiter fixed the problem.  Bravo, Arbiter!

https://arbitersports.zendesk.com/hc/en-us/articles/221361107

[mishatx]

A few years ago when an association I was in switched from another site to Arbiter, I got the welcome email with the plain text password - which matched the password I set on the old site.  So now it was clearly stored as plaintext in two places.