On Thu, 2024-07-11 at 13:53 -0700, ToddAndMargo via users wrote:
> ASUS is almost impossible to get any presales support.  Their
> two phone numbers either hand up on yo or go to answering
> machine.  Their contact forms won't allow gmail or ]zoho mail.
> They require you give them you gmail logon password and ID to
> use their support forum.  Yikes.

Most of the time things that say enter your email address and password
really mean enter the email address and the password you have
registered with this forum.  But people read it literally, and
compromise themselves.  This is probably the bulk cause of stolen
logons.  The better sites ask you to enter your log-on name and
password.

Some of the time it's about authenticating with an outside service. 
You log on with gmail (for instance) and they get (gmail) send them
some kind of response saying you're someone authenticated.  Various
sites used to do that with Hotmail, Facebook, etc.  Again this is a
high risk of credential stealing because you can't really tell what
they're going to do with what you type in, and who you're typing it
into.

I really hate these things.  Firstly, if they're genuinely not a scam,
too many things want to know who you are and track you, even when it's
not necessary for what you're doing.  Secondly, it's so hard to tell
whether they're actually going to do that (use a third party to
authenticate you), or just steal the credentials that you type in. 
You'd have to asses their code to find that out, and you don't have it.

Slightly less worrying, though still disturbing, are the sites that
*if* you're already logged onto gmail, or Facebook, etc., in some way
during your current session, then you're identified to them (already
authenticated).  It's slightly less worrying in that there's far less
risk of them stealing your password.  But still disturbing that you are
already identified when you expected that you were browsing
anonymously.


-- 
 
uname -rsvp
Linux 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
 
Boilerplate:  All unexpected mail to my mailbox is automatically deleted.
I will only get to see the messages that are posted to the mailing list.
 

-- 
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to