logoalt Hacker News

roryirvine • yesterday at 3:34 PM • 1 reply • view on HN

Yeah, I noticed they were recommending that users log in and reset their password - at a time when ASOS still hadn't said anything about the extent of the problem.

For all they knew, the attackers could have been able to subvert the reset process to collect plaintext passwords, so the Beeb's advice risked turning a disaster for ASOS into a catastrophe for their users.


Replies

altcognito • yesterday at 4:21 PM

I'm not sure who is recommending that, but if it is in the general channel it could be the proverbial bad guys making that recommendation in order to grab more account credentials.