4 ms·
Password resets are not as bad because the reset code is only useful very briefly, and then becomes useless. Don't use this startup's products, not now, not ev
by galdosdi 9y ago
Password resets are not as bad because the reset code is only useful very briefly, and then becomes useless.
Don't use this startup's products, not now, not ever. They've already revealed their true colors as obviously not just not caring, but not even really having the capacity thinking about security, which is even worse. And they're a financial/banking startup! Geez.
- catdog 9y agoIn itself it's probably not that catastrophic because the likelihood of that mail actually falling in the wrong hands may still be small enough to fit inside the risk model of credit cards which regularly puts convenience over security. Though it's easy to do it better without trading much convenience so I agree this is a sign that they probably don't do much better where it absolutely matters, stay away.
- deleted 9y ago[deleted]