BlueSunCorp

It surprises me that there is not more fraud on the internet. In fact, it's enough to give a renewed faith in the majority people that run their own websites.

I'm a student, and in my spare time I do some web design, and some coding - among other things. I'd consider myself fairly adept at languages like PHP and Python, and during the past few years I've written a few proof-of-concept ideas that require users to create an account, and afterwards log in.

When most people think of internet fraud, they imagine hackers in darkened rooms logging passwords, and using them to steal bank details. Perhaps this does happen, even if t's rarely heard of. What I find surprisingly uncommon, though, is people's passwords being logged simply by the owners of the sites that they visit.

Consider this. If you were to create an account on this site, or for that matter almost any other website, it would be child's play for the webmaster of that site (in the case of BlueSunCorp that would be myself or Richard) to retrieve the password you use, and the email associated with it. Obviously I'm not going to do that, but imagine what I could do with those details:

• Deny you access to your email
• Reset account passwords on practically any other site you've signed up for - given that most sites send a randomly generated password to your email when you ask them to
• Log into Paypal and other online banking systems. Paypal at the very least uses your email address as a login, so if you have one password which fits all, this would be like robbing candy from a baby
• Wreak general havoc in your name

Essentially, I would practically have the power to steal your online identity, and given the scale of some individual's presences across the internet (myself included), the implications for this would be fairly massive, on a personal level.

The solution? At the very least, have a different password for your email account. That's it. Your email account, along with the associated password, is the quickest gateway for accessing most of your online data, and it's a scary thought. So keep it safe from sites you're not totally sure about.

This isn't meant as a scare-story, or a reason to avoid signing up to sites. It's just a warning; if you imagine what your email addresses password can anable people to do, do you really want it in anyone's database?