What the HELL are they thinking?
Oct. 10th, 2002 11:21 am![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
ocelotEvery year, they have this United Way donation campaign at work. This year, they've made it nice and easy. You can go to a website and set up a donation to be automatically deducated from your paycheck.
They sent the username and password via plaintext email.
As far as I can tell, there is no further authentication required in order to arrange for this automatic paycheck reduction (perhaps there is - I haven't gone through the whole process, as I don't want to make a donation. I'm not betting on it, though). In addition, there's no way to change the automatically assigned password, so there's nothing whatsoever I can do to defend myself.
I talked to the postmaster (who works in the office next to me) about this. She says that the email was pushed through by The Power That Be despite complaints about the security.
*writes pissed off letters to idiots*
They sent the username and password via plaintext email.
As far as I can tell, there is no further authentication required in order to arrange for this automatic paycheck reduction (perhaps there is - I haven't gone through the whole process, as I don't want to make a donation. I'm not betting on it, though). In addition, there's no way to change the automatically assigned password, so there's nothing whatsoever I can do to defend myself.
I talked to the postmaster (who works in the office next to me) about this. She says that the email was pushed through by The Power That Be despite complaints about the security.
*writes pissed off letters to idiots*
