Velocity account locked/password reset required?

[rtyuiop]

Hi folks,

As background, I'm an IT security person, and it's fair to say we are sometimes prone to paranoia...

Just went to log into VFF and my account had been locked (without notification), and needed a password reset. Leaving aside the horror of how bad the VFF password reset is, normally I associate this sort of thing with a company knowing or suspecting a data breach involving user names and passwords, and wanting to prevent any compromised passwords from being used.

Best practice is to notify effected users but unfortunately in Australia we don't have breach notification laws (we should!), and given the track record of VA IT I can see them trying to sweep it under the rug.

Anyone else have their account locked, or was I just lucky?

Cheers,

Danny

 

[jbman]

Just tested and my account logs in as normal

 

[clazman]

Hi folks,

As background, I'm an IT security person, and it's fair to say we are sometimes prone to paranoia...

Just went to log into VFF and my account had been locked (without notification), and needed a password reset. Leaving aside the horror of how bad the VFF password reset is, normally I associate this sort of thing with a company knowing or suspecting a data breach involving user names and passwords, and wanting to prevent any compromised passwords from being used.

Best practice is to notify effected users but unfortunately in Australia we don't have breach notification laws (we should!), and given the track record of VA IT I can see them trying to sweep it under the rug.

Anyone else have their account locked, or was I just lucky?

Cheers,

Danny

PM me your details and I will see if i can login with them

 

[rtyuiop]

PM me your details and I will see if i can login with them

I can only send my details if you are Nigerian royalty?

 

[Dr Ralph]

PM me your details and I will see if i can login with them

I'm having trouble as well.

Maybe you can help.

My account number is: 1354899
Password: reality check

What are your details BTW?

 

[clazman]

I can only send my details if you are Nigerian royalty?

Watched a documentary on the weekend titled like how the other half lives, and it is a series of documentary's on how billionaires live.

Episode 1, said " London richest was between the Russians, Middle Eastern and the Chinese, but the big spenders at the moment was Nigerians."

 

[Denali]

Yesterday I had to reset our passwords.

 

[rtyuiop]

Yesterday I had to reset our passwords.

Hmm... So it's not just me. I am deeply suspicious! I'll put something in the Ask VFF forum, although I'm not sure how likely it is we'll get an answer...

 

[bullerdude]

Leaving aside the horror of how bad the VFF password reset is,

This is my view is a BIG issue… it’s not overly difficult to reset someone’s password on the system.

The velocity call centre also uses the same question to access verify your identity, which is a big no-no... staff could use that answer to reset user account from say their home PC.

 

[rtyuiop]

Tell me about it. The astonishing thing is that there would be - I guess - a fair population (people who use their mother's maiden name) where all the information needed for a password reset is printed on every VA boarding pass.

I was quite gobsmacked when I saw how this works! Unbelieveable... Sometimes I wish I was a criminal...

 

[AustraliaPoochie]

Tell me about it. The astonishing thing is that there would be - I guess - a fair population (people who use their mother's maiden name) where all the information needed for a password reset is printed on every VA boarding pass.

I was quite gobsmacked when I saw how this works! Unbelieveable... Sometimes I wish I was a criminal...

Not hard to be a crim in Au.
Chris Skase comes to mind.