6 ms·
CanadaPost is resetting all user passwords now due to a similar breach [1]. "The cause appears to be that login and password credentials stolen in external pri
by giarc 7y ago
CanadaPost is resetting all user passwords now due to a similar breach [1].
"The cause appears to be that login and password credentials stolen in external privacy breaches unrelated to Canada Post were used to access individual Canada Post accounts. This is possible when users reuse their credentials on several websites to avoid having to remember different passwords."
I'm not sure how they plan to prevent users from just reusing another password, however perhaps this education will help.
1. https://www.canadapost.ca/cpc/en/our-company/news-and-media/corporate-news/closures-and-service-interruptions-details.page?article=2019/10/16/canada_post_is_reset&cattype=announcements&cat=updates https://www.canadapost.ca/cpc/en/our-company/news-and-media/...
- ficklepickle 7y agoCanada Post doesn't sanitize user input very well. Username/password is reflected unchanged in JS. Got a console error because my password has a single quote in it.