FIDE Arena: unsecure website

Here's an article about it:

https://grahamcluley.com/2015/08/chess-fide-website-password/

TLDR: They save the password on plain text or in a way where the exact password can be known. And they don't use https when you upload sensitive information.

mmm so we already know fide can't organise a pi88-up in a brewery so why is this news?

Ouch... this is awful.

No. Awful is where a species of animal is wiped out, or a tragedy leads to the death of family members.

This is just poor management.

Nah, that's natural selection...

To a degree, but mostly poor coding.

Debatable. natural selection amonst competing species is I would agree "natural".

However when humans get involved it is more confused. As a species we are very conceited

Another problem is that they are forcing you to have an Arena account in order to view e.g. rating graphs on ratings.fide.com.

Who did they hire that makes such basic mistakes? This is Security 101.

Anyway, natural selection is not usually a nice thing, as Darwin himself spotted. Is what it is, we shouldn't project any type of moral standards on it, but is not nice.

I've noticed this too. White forcing an account on someone who wants to see the stats is not exactly nice, this has nothing to do with security. They should fix their mistakes though, implement password hashing and add SSL.