10. Sensitive Data Exposure

10. Sensitive Data Exposure: Sensitive Data Exposure is like writing your house safe's master pin code on a bright sticky note and taping it on your street-facing window in plain

Sensitive Data Exposure is like writing your house safe's master pin code on a bright sticky note and taping it on your street-facing window in plain text.

2 Analogies: Sensitive Data Exposure

Gold inside a Glass Box

Postman Reading a Postcard

2 Reasonings: The Risk of Plaintext Data

Plaintext Password Storage

Using Cleartext HTTP

2 LEGO Analogies: Data Scrambling

What is the most secure method to store user passwords in a database?

Encoding with Base64

Saving as plaintext strings

Hashing using a strong cryptographic hash algorithm with salt (Bcrypt or Argon2)

Reversible AES-128 encryption

Base64 is simple encoding, not encryption. Passwords must be saved using one-way cryptographic hash functions like Bcrypt.