« previous next »
Pages: [1]   Go Down

Author Topic: PSA: Lifemiles is not secure.  (Read 1885 times)

Offline davidrotts63

  • Dansdeals Lifetime Presidential Platinum Elite
  • *********
  • Join Date: May 2017
  • Posts: 7250
  • Total likes: 979
  • DansDeals.com Hat Tips 26
  • Gender: Male
    • View Profile
  • Programs: Hertz Gold, Hyatt Member, BA Blue, Ebay banned, Amazon Prime
PSA: Lifemiles is not secure.
« on: May 20, 2019, 05:41:10 PM »
Not only are LM passwords not encrypted, they are not secure either.
I've made multiple UA bookings with LM and boom, everytime, right there in the FFN section on UA, is my LM password.
At first site this seems ridiculous,  but as you think about you more you see how much worse it is...
Logged
(Quit) pulling out the flowers, and watering the weeds. -Peter Lynch

Offline mileagejunkie

  • Dansdeals Presidential Platinum Elite
  • ********
  • Join Date: Nov 2014
  • Posts: 2891
  • Total likes: 227
  • DansDeals.com Hat Tips 607
    • View Profile
Re: PSA: Lifemiles is not secure.
« Reply #1 on: May 20, 2019, 05:42:24 PM »
Quote from: davidrotts63 on May 20, 2019, 05:41:10 PM
Not only are LM passwords not encrypted, they are not secure either.
I've made multiple UA bookings with LM and boom, everytime, right there in the FFN section on UA, is my LM password.
At first site this seems ridiculous,  but as you think about you more you see how much worse it is...
Stop using your FFN as your password  ;D
Logged

Offline davidrotts63

  • Dansdeals Lifetime Presidential Platinum Elite
  • *********
  • Join Date: May 2017
  • Posts: 7250
  • Total likes: 979
  • DansDeals.com Hat Tips 26
  • Gender: Male
    • View Profile
  • Programs: Hertz Gold, Hyatt Member, BA Blue, Ebay banned, Amazon Prime
Re: PSA: Lifemiles is not secure.
« Reply #2 on: May 20, 2019, 05:44:19 PM »
Quote from: mileagejunkie on May 20, 2019, 05:42:24 PM
Stop using your FFN as your password  ;D
My FFN isn't "whydoesmileagejunkierepeatedlydisappear"


Oops.
Logged
(Quit) pulling out the flowers, and watering the weeds. -Peter Lynch

Offline Aerial Dag

  • Dansdeals Lifetime Platinum Elite
  • *******
  • Join Date: Jun 2013
  • Posts: 1064
  • Total likes: 84
  • DansDeals.com Hat Tips 7
    • View Profile
  • Location: MS Desert
Re: PSA: Lifemiles is not secure.
« Reply #3 on: May 20, 2019, 05:46:20 PM »
Quote from: davidrotts63 on May 20, 2019, 05:41:10 PM
Not only are LM passwords not encrypted, they are not secure either.
I've made multiple UA bookings with LM and boom, everytime, right there in the FFN section on UA, is my LM password.
At first site this seems ridiculous,  but as you think about you more you see how much worse it is...
:o  Who doesn’t encrypt passwords in 2019??
That’s crazy. Just made a LM booking an hour ago so luckily I drained my account.
Logged

Offline davidrotts63

  • Dansdeals Lifetime Presidential Platinum Elite
  • *********
  • Join Date: May 2017
  • Posts: 7250
  • Total likes: 979
  • DansDeals.com Hat Tips 26
  • Gender: Male
    • View Profile
  • Programs: Hertz Gold, Hyatt Member, BA Blue, Ebay banned, Amazon Prime
Re: PSA: Lifemiles is not secure.
« Reply #4 on: May 20, 2019, 05:48:28 PM »
Quote from: Aerial Dag on May 20, 2019, 05:46:20 PM
:o  Who doesn’t encrypt passwords in 2019??
That’s crazy. Just made a LM booking an hour ago so luckily I drained my account.
Check if you see the same, curious if it's like this with other bookings aside from UA.
« Last Edit: May 20, 2019, 05:53:05 PM by davidrotts63 »
Logged
(Quit) pulling out the flowers, and watering the weeds. -Peter Lynch

Offline yelped

  • Dansdeals Lifetime 10K Presidential Platinum Elite
  • *******
  • Join Date: Mar 2015
  • Posts: 10910
  • Total likes: 3956
  • DansDeals.com Hat Tips 43
    • View Profile
Re: PSA: Lifemiles is not secure.
« Reply #5 on: May 20, 2019, 05:58:12 PM »
Quote from: davidrotts63 on May 20, 2019, 05:48:28 PM
Check if you see the same, curious if it's like this with other bookings aside from UA.
I made two with Swiss and the LM FFN was in the Swiss FFN field.
Logged

Offline davidrotts63

  • Dansdeals Lifetime Presidential Platinum Elite
  • *********
  • Join Date: May 2017
  • Posts: 7250
  • Total likes: 979
  • DansDeals.com Hat Tips 26
  • Gender: Male
    • View Profile
  • Programs: Hertz Gold, Hyatt Member, BA Blue, Ebay banned, Amazon Prime
Re: PSA: Lifemiles is not secure.
« Reply #6 on: May 20, 2019, 05:59:13 PM »
Quote from: yelped on May 20, 2019, 05:58:12 PM
I made two with Swiss and the LM FFN was in the Swiss FFN field.
Check the email spot as well.
Logged
(Quit) pulling out the flowers, and watering the weeds. -Peter Lynch

Offline mileagejunkie

  • Dansdeals Presidential Platinum Elite
  • ********
  • Join Date: Nov 2014
  • Posts: 2891
  • Total likes: 227
  • DansDeals.com Hat Tips 607
    • View Profile
Re: PSA: Lifemiles is not secure.
« Reply #7 on: May 20, 2019, 06:00:14 PM »
Quote from: davidrotts63 on May 20, 2019, 05:44:19 PM
My FFN isn't "whydoesmileagejunkierepeatedlydisappear"


Oops.
Because he’s most active on the hidden forums, DDFB and at DOs.
Logged

Offline whYME

  • Dansdeals Presidential Platinum Elite
  • ********
  • Join Date: May 2008
  • Posts: 3370
  • Total likes: 1241
  • DansDeals.com Hat Tips 3
  • Gender: Male
    • View Profile
Re: PSA: Lifemiles is not secure.
« Reply #8 on: May 20, 2019, 06:04:31 PM »
Quote from: Aerial Dag on May 20, 2019, 05:46:20 PM
:o  Who doesn’t encrypt passwords in 2019??
Trying to decide if I should get pedantic and FTFY to who doesn't hash passwords in 2019....
Logged

Offline yelped

  • Dansdeals Lifetime 10K Presidential Platinum Elite
  • *******
  • Join Date: Mar 2015
  • Posts: 10910
  • Total likes: 3956
  • DansDeals.com Hat Tips 43
    • View Profile
Re: PSA: Lifemiles is not secure.
« Reply #9 on: May 20, 2019, 06:21:21 PM »
The bookings I made are for flights that were taken already so I can't look it up now, but this should reinforce the idea of not reusing passwords across different websites and services.
Logged

Offline mmgfarb

  • Dansdeals Lifetime Presidential Platinum Elite
  • *********
  • Join Date: Dec 2015
  • Posts: 8394
  • Total likes: 1110
  • DansDeals.com Hat Tips 4
    • View Profile
Re: PSA: Lifemiles is not secure.
« Reply #10 on: May 20, 2019, 06:55:44 PM »
Quote from: whYME on May 20, 2019, 06:04:31 PM
Trying to decide if I should get pedantic and FTFY to who doesn't hash passwords in 2019....
Lol, with salt and pepper too?
Logged
"JS [is] a fetid cesspool of unvarnished linguistic manure, with lots of useless drivel and post-padding." -Moishebatchy

Offline myi

  • Dansdeals Lifetime 20K Presidential Platinum Elite
  • ********
  • Join Date: Feb 2015
  • Posts: 23613
  • Total likes: 2440
  • DansDeals.com Hat Tips 356
  • Gender: Male
    • View Profile
  • Location: InMyPants! 🙈
  • Programs: 2Many2List!
Re: PSA: Lifemiles is not secure.
« Reply #11 on: May 20, 2019, 07:08:32 PM »
Quote from: mileagejunkie on May 20, 2019, 06:00:14 PM
Because he’s most active on the hidden forums, DDFB and at DOs.
So let's hear when the next DO is, so we can come pay a visit.
Logged
Quote
Need your LG Exalt fixed? Cracked in half? Water damage? Or parts to repair yourself. 347.201.2501

Offline Aerial Dag

  • Dansdeals Lifetime Platinum Elite
  • *******
  • Join Date: Jun 2013
  • Posts: 1064
  • Total likes: 84
  • DansDeals.com Hat Tips 7
    • View Profile
  • Location: MS Desert
Re: PSA: Lifemiles is not secure.
« Reply #12 on: May 20, 2019, 07:08:55 PM »
Quote from: whYME on May 20, 2019, 06:04:31 PM
Trying to decide if I should get pedantic and FTFY to who doesn't hash passwords in 2019....
Huh wow you’re right. Didn’t realize bcrypt was just another hashing.
Logged
Pages: [1]   Go Up
« previous next »