News for hackers. Stuff that matters.
Re:The FastMail Security Mindset by samat on Tuesday December 05, 2017 @02:45PM (#15855110)
Dear Fastmal, I am a happy customer, but very concerned by this report. Would you mind to comment?
Re:The FastMail Security Mindset by samat on Tuesday December 05, 2017 @03:06PM (#15855293)
I just forwarded this comment to their customer support. Let’s see what would be their comment.
Re:The FastMail Security Mindset by terraforming on Tuesday December 05, 2017 @04:39PM (#15856279)
Please tag me when they answer. (does HN have tags/notifications?)
Re:The FastMail Security Mindset by Stratoscope on Tuesday December 05, 2017 @04:57PM (#15856412)
> does HN have tags/notifications?

No, but if you visit your Threads page (link at the top of every page) you can see any replies to any of your comments. There's nothing special that marks a new reply, though.

I have a habit of upvoting nearly every reply anyone makes to any comment of mine, as a way of thanking them for the comment. This also happens to help when I skim my Threads page, since it's easy to spot comments that still have the voting button(s).

Re:The FastMail Security Mindset by callahad on Wednesday December 06, 2017 @04:32AM (#15859782)
Dan Grossman's http://www.hnreplies.com/ works wonders
Re:The FastMail Security Mindset by Osmium on Tuesday December 05, 2017 @05:11PM (#15856529)
Likewise. Social engineering is a big concern. I understand the risks of getting locked out of my account, but would much prefer a stricter system -- along with published guidelines on Fastmail's process for handling these cases.

Being able to persuade a customer service rep to provide access to an account (even if indirectly by changing a recovery email) should never be possible.