News for hackers. Stuff that matters.

A comment on Heroku resetting passwords for “a portion” of their users immediately. Parent comment

Re:Heroku resetting passwords for “a portion” of their users... by 0des on Tuesday May 03, 2022 @11:55PM (#31256559)
I assumed that was a phishing email and didn't proceed.
[ Parent | on HN ]
Re:Heroku resetting passwords for “a portion” of their users... by sjhuang26 on Wednesday May 04, 2022 @12:03AM (#31256612)
If it isn't a phishing attempt it would be really surprising to me that they would use http. BTW, https://exacttarget.com redirects to an official Salesforce product page, but that doesn't guarantee it to not be phishing.
[ Parent | on HN ]
Re:Heroku resetting passwords for “a portion” of their users... by infamouscow on Wednesday May 04, 2022 @12:26AM (#31256754)
> If it isn't a phishing attempt it would be really surprising to me that they would use http.

Why? Technical incompetence is a systematic problem that comes from the top down. This is what happens when mediocrity becomes acceptable and takes priority over correctness.

I would suggest moving all of your business from Heroku ASAP. These kind of mistakes strongly suggest nobody capable of intelligent thought makes decisions at Heroku, nor has for awhile.

[ Parent | on HN ]
Re:Heroku resetting passwords for “a portion” of their users... by zeepzeep on Wednesday May 04, 2022 @03:07AM (#31257600)
> If it isn't a phishing attempt it would be really surprising to me that they would use http

Spammers are the first to adopt https and all the mail and dns security stuff. It never was a sign of legitimacy

[ Parent | on HN ]
Re:Heroku resetting passwords for “a portion” of their users... by memorable on Wednesday May 04, 2022 @01:08AM (#31256956)
The website seems to be down at least for me.
[ Parent | on HN ]