?

Log in

No account? Create an account
Will be cross-posting from Dreamwidth - Input Junkie
September 6th, 2010
12:00 pm

[Link]

Previous Entry Share Next Entry
Will be cross-posting from Dreamwidth

(34 comments | Leave a comment)

Comments
 
[User Picture]
From:sashajwolf
Date:September 7th, 2010 11:22 pm (UTC)
(Link)
DW is also compromising people's security, though, by its dismissive attitude to the security flaw in OpenID whereby if the original DW account is purged and the name is reused, the new owner gets access to the original account's OpenID. LJ have responded to the same issue by temporarily disabling OpenID for reused accounts while they look for a permanent fix; DW says it is also looking for a fix, but has refused to do anything about the problem in the meantime.
[User Picture]
From:nancylebov
Date:September 8th, 2010 12:41 am (UTC)
(Link)
That's a problem, though it sounds like it would affect fewer people. How long has the problem been known?
[User Picture]
From:sashajwolf
Date:September 8th, 2010 07:31 am (UTC)
(Link)
Since early August, IIRC. LJ had already started implementing re-use of old accounts when it was pointed out to them; DW started about two weeks ago, when they already knew of the problem.
nancybuttons.com Powered by LiveJournal.com