Re:Squarespace: They Asked for My Password.
by prof_hobart on Friday February 14, 2014 @08:45AM
(#7238424)
You don't think there's a systemic failure if under-trained new hires are on the front line requesting passwords?
If they've not been educated about not doing that, there's a fair chance they aren't going to be too smart around other big security issues either - such as resetting passwords with very little validation of whether it's the genuine customer requesting it or not.
If they've not been educated about not doing that, there's a fair chance they aren't going to be too smart around other big security issues either - such as resetting passwords with very little validation of whether it's the genuine customer requesting it or not.