Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




Fat bottom Trump
9921 posts

Uber Geek
+1 received by user: 4778

Subscriber

# 208279 4-Feb-2017 13:06
Send private message

Actually, you probably shouldn’t trust any company with your data, but I have a special reason for asking this.

 

The Herald is part of, and a base for, a media conglomerate that operates regional newspapers all over New Zealand. We have a physical subscription to one of these but I often view the on-line summary as well.

 

I finally decided that it might be worthwhile taking advantage of the digital free full version our subscription entitles us to, so I registered. What I got back on the email account I registered with, in plain text, was a confirmation email that included all my registration details, along with my password. Yep, plain text, clear as day, no attempt at security of any kind. I know this used to be common practice, but I thought companies had learned better by now. The registration page was secure, and so is the login page, but what do they do with my password after I log in? It makes one wonder.

 

Of course the information in that email is not a path to anything important in itself, but it does raise questions about the company's overall security awareness. Although the email I received was in the name of my local paper, it came from subscriptions@nzme.co.nz. So am I right to consider this inexcusably sloppy, or am I overreacting?

 

 

 

 





I reject your reality and substitute my own. - Adam Savage
 


Create new topic
3293 posts

Uber Geek
+1 received by user: 1079

Trusted
Lifetime subscriber

  # 1715373 4-Feb-2017 13:12
One person supports this post
Send private message

Rikkitic: am I right to consider this inexcusably sloppy

 

Yes.


gzt

10705 posts

Uber Geek
+1 received by user: 1760


  # 1715374 4-Feb-2017 13:14
Send private message

Agree. Securing the sign up with HTTPS and then forwarding the same data in email appears self defeating.

My guess is they use the same system for multiple purposes. If you bought a delivery subscription there is some benefit to checking those details as part of the purchase. Makes no sense for confirmation of an electronic subscription.

 
 
 
 


3293 posts

Uber Geek
+1 received by user: 1079

Trusted
Lifetime subscriber

  # 1715395 4-Feb-2017 14:04
Send private message

As an exercise out of interest, change your password. I'm picking you'll get a password change confirmation email with your new password in clear text. 


4775 posts

Uber Geek
+1 received by user: 2723

Trusted

  # 1715405 4-Feb-2017 15:05
2 people support this post
Send private message

I barely trust the Herald to get their stories or facts straight, let alone with anything else!


1828 posts

Uber Geek
+1 received by user: 215
Inactive user


  # 1715451 4-Feb-2017 17:13
Send private message

If they can read your password then so can anybody else simple as that .... Passwords should be encrypted from the get go 


Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

HPE to acquire supercomputing leader Cray
Posted 20-May-2019 11:07


Techweek starting around NZ today
Posted 20-May-2019 09:52


Porirua City Council first to adopt new council software solution Datascape
Posted 15-May-2019 12:00


New survey provides insight into schools' technology challenges and plans
Posted 15-May-2019 09:30


Apple Music now available on Alexa devices in Australia and New Zealand
Posted 15-May-2019 09:11


Make a stand against cyberbullying this Pink Shirt Day
Posted 14-May-2019 20:23


Samsung first TV manufacturer to launch the Apple TV App and Airplay 2
Posted 14-May-2019 20:11


Vodafone New Zealand sold
Posted 14-May-2019 07:25


Kordia boosts cloud performance with locally-hosted Microsoft Azure ExpressRoute
Posted 8-May-2019 10:25


Microsoft Azure ExpressRoute in New Zealand opens up faster, more secure internet for Kiwi businesses
Posted 8-May-2019 09:39


Vocus Communications to deliver Microsoft Azure Cloud Solutions through Azure ExpressRoute
Posted 8-May-2019 09:25


Independent NZ feature film #statusPending to premiere during WLG-X
Posted 6-May-2019 22:13


The ultimate dog photoshoot with Nokia 9 PureView #ForgottenDogsofInstagram
Posted 6-May-2019 09:41


Nokia 9 PureView available in New Zealand
Posted 6-May-2019 09:06


Motorola Solutions joins local partners to deliver advanced communications network in New Zealand
Posted 30-Apr-2019 21:50



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.