Yeah, I noticed they were recommending that users log in and reset their password - at a time when ASOS still hadn't said anything about the extent of the problem.
For all they knew, the attackers could have been able to subvert the reset process to collect plaintext passwords, so the Beeb's advice risked turning a disaster for ASOS into a catastrophe for their users.
Yeah, I noticed they were recommending that users log in and reset their password - at a time when ASOS still hadn't said anything about the extent of the problem.
For all they knew, the attackers could have been able to subvert the reset process to collect plaintext passwords, so the Beeb's advice risked turning a disaster for ASOS into a catastrophe for their users.