Hung Truong: The Blog!

Banana Republic (and Gap, etc.) Stores Passwords in Plain Text

I was sitting on the subway when I got a random email from Banana Republic that contained my password in plain text. Besides the fact that I hadn’t requested it (lots of Hung Truongs think that they’re me @ gmail), I was surprised because any company that even slightly values security does not store passwords in plain text. It is quite jarring to see a password show up on my iPhone’s home screen. Here’s the email in case anyone needs proof:

The fact that BR stores passwords in plain text means that they’re probably a very nice target for a quick hack (and if they’ve got bad practices in password storage, they probably have holes elsewhere as well). Unlike the Gawker password leak, which had hashed passwords (though they could still be eventually brute-forced), the BR passwords aren’t even obfuscated (or if they are, it’s in an easily reversible way).

If you have a Banana Republic, Gap, Old Navy, Piperlime or Athela account, I highly suggest you change your password to something unique that you don’t use for any other sites (um, just like all your passwords… I totally have different passwords and two-factor security for everything).

I’d also suggest you contact Banana Republic and tell them that their security policies suck. Maybe they’ll fix it if enough people complain. That’d be sad if it took a huge hack and user info disclosure to change their ways.

Startup Incubation Week 5 Update!

I’ve been in New York working on our startup for about 5 weeks now. So far the experience has been really enlightening. Between reading the Startup Genome Report, a handbook on Customer Development, listening to awesome lecturers talk about bizdev, pitching, pivoting, etc, I think I have a much better handle on what entrepreneurship really is.

So far, we’ve probably pivoted about 2 times, and we’re not even at the halfway point yet! The support from mentorships has been really helpful in understanding what startups really need to focus on to be successful. Without a market, there’s no company. Without the proper product to market fit, there’s no company. And if everything fits perfectly, you still need to be able to scale your service or product to meet demand!

Approaching a startup in a semi-scientific way is also very cool. Instead of looking at a startup as an ultra risky venture, you’re really looking for ways to prove hypotheses and make the thing as un-risky as possible while maximizing the potential upsides.

Bebarang is chugging along and I hope to provide an actual launch post some time soon (in private beta, of course).

Start Spreading The News… I’m Moving to NYC For The Summer!

So I’ve been relatively quiet on this piece of news for a while, but since I’m moving to New York in like, two days, I figure I should post something about it.

A few months ago, I joined up with Bebarang, a startup that’s graduated from the TechArb program at the University of Michigan and has been accepted into NYC SeedStart for the Summer of 2011. The simple pitch is that we’re trying to solve the problem of babies growing out of their clothes all the time. We’re still figuring out the details.

I am super excited (and lucky) to be part of another entrepreneurial incubator program. I gained a whole lot from the awesomeness of RPM10, and I hope the same will be true for NYC SeedStart. My partner, Allen, is super sharp and I think we’ll end up getting a lot of stuff done between the two of us.

Regardless if we exit at $100 billion (or settle for a $50 billion exit), I’m looking forward to living in a new city, getting to know the tech scene and building up a company once again. Stay tuned for updates about my summer in NY!

New iPhone Ringtone: Nyan Cat

I kinda got tired of the Guile ringtone on my iPhone, so I made a Nyan Cat one. You can have it too! Get it here.

Threadless Shirt Meme: Pianos That Aren’t

There are a few memes that are pretty regularly printed on Threadless. Stuff like pop culture references turned into puns, things with cute faces (which normally don’t have faces) and birds are among the popular subjects of Threadless shirts. I just noticed another one while browsing the site for shirts during the summer $12 sale (which has been extended to Friday): pianos that aren’t.

Item 1: The Choir of Antarctica

Item 2: Piano Skyline

Item 3: The Pianist

Are there any that I missed? Lemme know in the comments!