4 ms·
“Deliveroo takes online security very seriously. Sadly fraudsters rely on the fact that people reuse the same passwords on multiple online services to try and g
by CaptainZapp 8y ago
“Deliveroo takes online security very seriously. Sadly fraudsters rely on the fact that people reuse the same passwords on multiple online services to try and gain entry to different accounts across the web.”
Yeah! Blame it on your customers! Way to go!
Sigh! Another gig economy service I'm damn sure never to use.
- jwdunne 8y agoThat's not even an excuse. There are solutions out there that mitigate the fact people reuse the same passwords.
- philpem 8y agoI'd love to see a more specific version of Troy Hunt's "have I been pwned" API which explicitly blocked user/password combinations which had been leaked. The catch is, you'd have to store the pairs together which then makes you a target, so in practice the best you can really do is what's on offer already -- check that the password hasn't been leaked (and maybe if the email address has a high HIBP leak count). That solution would seem to force people into password managers and random high-entropy passwords or passphrases...
- randerson 8y agoExample solutions that wouldn't result in a massive customer drop-off though? The average person isn't going to set up 2FA or remember a randomly generated password just for a food delivery website.
- OliverJones 8y ago"...takes online security very seriously..." That is a statement that means its exact opposite. If you get breached, don't let that phrase creep into your announcement. Just say "We were breached. We're sorry. We're cleaning up the mess." or whatever.