Timeline for What to do if stuck with website that has poor security?
Current License: CC BY-SA 3.0
10 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Mar 17, 2016 at 4:19 | history | edited | Neil McGuigan | CC BY-SA 3.0 |
added 57 characters in body
|
Mar 17, 2016 at 4:16 | comment | added | Neil McGuigan | @jpmc it's a trade-off. weigh risk of someone easily breaking into your loan account and wreaking havoc, or a loan company suing you for having a slightly wrong zip code | |
Mar 17, 2016 at 3:39 | comment | added | jpmc26 | I would not change your personal information to something fake. These are people you owe money to. Even if their security is irresponsible garbage, you don't want to risk giving them a case against you if you get on their bad side. | |
Mar 16, 2016 at 23:28 | comment | added | Neil McGuigan | @SmokeDispenser threat: user wants to login to my account. Finds my real dob, zip code etc on linkedin and other places. Resets my password. Views my account. If zip is fake they can't do that | |
Mar 16, 2016 at 23:27 | comment | added | Tobi Nary | You're completely right. I'm tired, obviously. Good night;) | |
Mar 16, 2016 at 23:24 | comment | added | Ángel | @SmokeDispenser: in order to "recover" DasBeasto account password, an attacker would need to provide the same misspelling. | |
Mar 16, 2016 at 23:18 | comment | added | Tobi Nary | Also, what would be the benefit of providing false personal information? That info can most likely be obtained through other means, in contrast to the actual debt data, which is the greater concern here, probably. | |
Mar 16, 2016 at 18:54 | history | edited | Neil McGuigan | CC BY-SA 3.0 |
added 4 characters in body
|
Mar 16, 2016 at 18:47 | comment | added | DasBeasto | I'm not sure where they got the zip information from it may have been given when applying for the loan but I'll see if it is changeable. Unfortunately the username is my SSN so I can't change that to something random. Also since this is a federal loan, i.e. a line of credit, changing these to fake values may be considered fraud, but I am unsure. | |
Mar 16, 2016 at 18:38 | history | answered | Neil McGuigan | CC BY-SA 3.0 |