SoylentNews is people
SoylentNews
from the LifeLock-just-needs-a-data-protection-service dept.
Identity theft protection firm LifeLock — a company that's built a name for itself based on the promise of helping consumers protect their identities online — may have actually exposed customers to additional attacks from ID thieves and phishers. The company just fixed a vulnerability on its site that allowed anyone with a Web browser to index email addresses associated with millions of customer accounts, or to unsubscribe users from all communications from the company.
The upshot of this weakness is that cyber criminals could harvest the data and use it in targeted phishing campaigns that spoof LifeLock's brand. Of course, phishers could spam the entire world looking for LifeLock customers without the aid of this flaw, but nevertheless the design of the company's site suggests that whoever put it together lacked a basic understanding of Web site authentication and security.
Source: Krebs on Security
(Score: 0) by Anonymous Coward on Sunday August 05 2018, @06:04PM
"By idiots for idiots" seems appropriate.
(Score: 5, Informative) by Thexalon on Sunday August 05 2018, @06:11PM (2 children)
It turns out that identity protection is hard, and LifeLock's services never did what they claim to do.
The only thing that stops a bad guy with a compiler is a good guy with a compiler.
(Score: 0) by Anonymous Coward on Sunday August 05 2018, @06:28PM
Mmmm I like gravy almost as much as I like pudding. If only I could find a way to combine the two...
(Score: 2) by Joe Desertrat on Sunday August 05 2018, @09:02PM
Yeah, I can't help thinking companies like that exist solely to pry money from ignorant consumers. At best they are only a single line in your defenses, so why pay for them when you have to do most of it yourself anyway to be safe?
(Score: 4, Funny) by Ethanol-fueled on Sunday August 05 2018, @06:17PM (1 child)
Stop fucking around with businesses nobody knows about and get LinkedIn or Facebook, and give the rest of us a good excuse to not have those accounts.
(Score: 1, Informative) by Anonymous Coward on Sunday August 05 2018, @09:24PM
https://www.troyhunt.com/observations-and-thoughts-on-the-linkedin-data-breach/ [troyhunt.com]
https://www.theguardian.com/technology/2018/apr/08/facebook-to-contact-the-87-million-users-affected-by-data-breach [theguardian.com]
(Score: 4, Funny) by srobert on Sunday August 05 2018, @07:16PM
Those are real goodfellas at Lifelock offering "protection" for your identity. Because you know, you got a real nice identity there. It'd be a real shame if somebody was to like, make off with it. You know what I mean?