News for hackers. Stuff that matters.

A comment on Stop restricting my password - Help these sites get better security..

Re:Stop restricting my password - Help these sites get bette... by Elepsis on Friday January 22, 2010 @12:04AM (#1069163)
Erm, Delta sure seems like an odd member of the list, doesn't it?

They require you to enter a SkyMiles number and a PIN, along with your last name... all of which is certainly not very secure information. But ultimately, all that gives you access to is viewing a person's SkyMiles account. It hardly seems to make sense alongside banking sites.

[ Parent | on HN ]
Re:Stop restricting my password - Help these sites get bette... by Zak on Friday January 22, 2010 @12:53AM (#1069204)
Access to a Skymiles account allows booking award tickets - in any name, as well as using any stored credit card to pay for part of the cost. I think it also allows redirecting email notifications to another address. I think the chances of catching the person responsible for a fraudulent use of such an account are higher than for a bank account, but the potential harm is pretty high.
[ Parent | on HN ]