4 ms·

Has anyone else noticed that clicking on this link causes them to be logged in as "Pam" on the site? That doesn't seem great...

lainga 8y ago
It persists when you move to other pages, too, although it's not obvious from the site what opportunities, if any, this newfound Pamhood presents. EDIT: going to "manage your subscriptions" presents you with a login page, so no danger.
- news_to_me 8y ago
  It looks like all the pages with personal info or settings are behind a login screen. Rest easy, Pam.
- cdiddy2 8y ago
  It allows you to logout of Pam. That seems to be it from a quick glance
  - SketchySeaBeast 8y ago
    But it does nothing. You load the link again and you are once again a member of the Pamstalt.
    - s73v3r_ 8y ago
      It's like a Sparticus thing. "I am Pam."
netrap 8y ago
Haha, I see it also: xxxxxxx@xxxxxx.com Luckily it asked for a login when I went to the profile.
patorjk 8y ago
URL should probably be changed to: https://www.advisory.com/research/care-transformation-center/care-transformation-center-blog/2018/07/loneliness-epidemic https://www.advisory.com/research/care-transformation-center... Looks like the original URL came from a daily briefing email.
emiliobumachar 8y ago
Might be a dark pattern. To nudge you to create an account to make the world right again.
- s73v3r_ 8y ago
  That's what I was supposed to do? I just legally changed my name to Pam.
- lainga 8y ago
  That would be the weirdest dark pattern ever, although I could see it going down in a design meeting: You know how people speak up more if you say something wrong, than if you ask for the right answer? Well, what if people were more likely to make accounts, if we made them think they already had an account called "Pam"? ...brilliant!
allworknoplay 8y ago
yeah sloppy, it sets a session token; session-setting URLs should be hard to share, not easy. thank god it asks for a password before you can do anything bad, but the e-mail exposure in the settings flow isn't great. fortunately the x_id param isn't sequential.

lainga 8y ago

It persists when you move to other pages, too, although it's not obvious from the site what opportunities, if any, this newfound Pamhood presents. EDIT: going to "manage your subscriptions" presents you with a login page, so no danger.

news_to_me 8y ago
It looks like all the pages with personal info or settings are behind a login screen. Rest easy, Pam.
cdiddy2 8y ago
It allows you to logout of Pam. That seems to be it from a quick glance
- SketchySeaBeast 8y ago
  But it does nothing. You load the link again and you are once again a member of the Pamstalt.
  - s73v3r_ 8y ago
    It's like a Sparticus thing. "I am Pam."

netrap 8y ago

Haha, I see it also: xxxxxxx@xxxxxx.com Luckily it asked for a login when I went to the profile.

patorjk 8y ago

URL should probably be changed to: https://www.advisory.com/research/care-transformation-center/care-transformation-center-blog/2018/07/loneliness-epidemic https://www.advisory.com/research/care-transformation-center... Looks like the original URL came from a daily briefing email.

emiliobumachar 8y ago

Might be a dark pattern. To nudge you to create an account to make the world right again.

s73v3r_ 8y ago
That's what I was supposed to do? I just legally changed my name to Pam.
lainga 8y ago
That would be the weirdest dark pattern ever, although I could see it going down in a design meeting: You know how people speak up more if you say something wrong, than if you ask for the right answer? Well, what if people were more likely to make accounts, if we made them think they already had an account called "Pam"? ...brilliant!

allworknoplay 8y ago

yeah sloppy, it sets a session token; session-setting URLs should be hard to share, not easy. thank god it asks for a password before you can do anything bad, but the e-mail exposure in the settings flow isn't great. fortunately the x_id param isn't sequential.