Jump to content
Coopers Community

New version of Mozilla - Insecure Log In


Blunt

Recommended Posts

Dunno Blunt, I use Chrome almost exclusively. I have to use Firefox/Mozilla for the tax department coz they are like 5 years behind the times.. It took them like 5 years to accept Firefox. Before that, it was exclusively iexplore.

 

From my experience, whilst Firefox is very good, it does seem to get its nickers in a knot at times. I don't have any problems with Chrome, it seems to be a very good platform.

 

Cheers

Bill

Link to comment
Share on other sites

I think the "Store" login is ok but the coopers club login is the insecure one.

 

What this means is that

1) you are on a login page entering username and password

AND

2) that the information you send when you press "login" is not encrypted.

 

This is important to know if you care about this information being stolen and that it is of any value to someone who might go to any length to steal it.

 

If you were using some public wifi and logging into some site where you had sensitive information then you would worry about this warning and be thankful for it.

 

Maybe the club is not a big target.

 

It would be very easy for coopers to fix. They just need to use

https://club.coopers.com.au/#/club-login/club-login/club-login/

instead of

http://club.coopers.com.au/#/club-login/club-login/club-login/

for the login page.

 

They already have the https server and certificate because once you login it goes to

https://club.coopers.com.au/club/dashboard/

 

Link to comment
Share on other sites

... it could be an issue if you use the same password on other sites.

 

Another scam is that if someone gets hold of your username and password on some site like this then they use it and the trust you have built to scam others on that list. they will post in your name: "hey guys, sorry to ask this but I'm in some big trouble right now - I've lost my job and my dog needs urgent chemo...".

 

I got one of these from my boss where he was stuck in Cambodia and had his passport and cash stolen; If I could just wire him some money to the place he was staying blah blah. I walked over and asked him if he thought it might be a scam.

 

Look, it's unlikely but there are people out there doing this and it can pay to stop and think, particularly when you are connected to "public" networks.

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...