Scary: Getting login access can be far too easy.

[Jeff7]

I was having trouble logging into something, possibly due to using some odd Alt+ codes in my password. :hmm:

I filled out a no-login support ticket, with no further credentials than my full name and e-mail address.


With no further questions, I was sent a plain text e-mail of the master account login.
(I can get into billing information, but nothing further.)



Time to shop for another service provider.


(You'll please forgive me if I don't post the name of the specific service provider right now, given that their security is on an "anyone needs to know" basis.)



</blog>
</https>

 

[pcslookout]

This has always been the case. Welcome to 2014.

 

[Jeff7]

This has always been the case. Welcome to 2014.

Meanwhile, try to use TreasuryDirect.gov.

- Enter account number.
- E-mailed a one-time-use password.
- Enter that password.
- Enter the other password using an on-screen keyboard.
- Using Back/Forward on the site, or pressing Esc while a page is loading, or even clicking some of the links on the pages will immediately log you out, which requires that the whole process be repeated.

I think a lost login there would require nothing short of a DNA sample and 5 witnesses signing a notarized document while chanting the Treasury's mission statement.

 

[lamedude]

If you feel optimistic submit it to plain text offenders. They've reformed 13 companies.

 

[MongGrel]

Meanwhile, try to use TreasuryDirect.gov.

- Enter account number.
- E-mailed a one-time-use password.
- Enter that password.
- Enter the other password using an on-screen keyboard.
- Using Back/Forward on the site, or pressing Esc while a page is loading, or even clicking some of the links on the pages will immediately log you out, which requires that the whole process be repeated.

I think a lost login there would require nothing short of a DNA sample and 5 witnesses signing a notarized document while chanting the Treasury's mission statement.

Pics or I find it hard to believe and where would you get an account number to it to begin with ????

I am in no way trying that one at all but really.

 

[lxskllr]

My account at libre.fm has better security, and the only ramifications there of someone taking my account, is I'll get shitty music showing up in my scrobble list :^D