Sometimes you just want to slap people upside the head
Following on from the Gawker account hack, I have gone and changed a bunch of accounts, even though I may not have actually used a password I generated for Gawker, but it seemed prudent.
Lifehacker have a page up here which details the response..
Including this bit:
2) What if I logged in using Facebook Connect? Was my password compromised?
No. We never stored passwords of users who logged in using Facebook Connect. We have, however, disabled Facebook Connect logins temporarily.
*facepalm*
So what you're saying is, not only are you incompetent, and let people steal your user/password database, you've now stopped the only way of stopping it from happening again??
Nothing pisses me off more than websites that require you to register or login to look at attachments on forums, for example (ok, that's hyperbole a little bit, there are things that piss me off more than this :P). Facebook Connect (or ideally OpenID) are an awesome solution to the problem of having to create/maintain/worry about accounts on every site on the internet. I mean sure, there are idiots in marketing who love the idea of "rich user engagement" from tying them to your site with an account, but I think they severely overestimate their own importance.
.. but don't get me started on janrain/rpx's recent change that suggests you put your paypal username/password into HTML hosted on an insecure site so you can join the social story. That's just stupid.
Lifehacker have a page up here which details the response..
Including this bit:
2) What if I logged in using Facebook Connect? Was my password compromised?
No. We never stored passwords of users who logged in using Facebook Connect. We have, however, disabled Facebook Connect logins temporarily.
*facepalm*
So what you're saying is, not only are you incompetent, and let people steal your user/password database, you've now stopped the only way of stopping it from happening again??
Nothing pisses me off more than websites that require you to register or login to look at attachments on forums, for example (ok, that's hyperbole a little bit, there are things that piss me off more than this :P). Facebook Connect (or ideally OpenID) are an awesome solution to the problem of having to create/maintain/worry about accounts on every site on the internet. I mean sure, there are idiots in marketing who love the idea of "rich user engagement" from tying them to your site with an account, but I think they severely overestimate their own importance.
.. but don't get me started on janrain/rpx's recent change that suggests you put your paypal username/password into HTML hosted on an insecure site so you can join the social story. That's just stupid.