| E-mailing of passwords
Posted: 4/13/2006 1:23:38 PM | You're welcome, sweetie.
most of the people that complain are married, It acts as sort of a filter
He has been running this site for 5 years. He is the one that receives the complaints.
I don't see how it could be an effective one
The Admin knows what is effective on his own site. | |
|
| E-mailing of passwords
Posted: 7/21/2008 1:16:21 PM | I just have to say, based on the number of complaints, this whole discussion could be squelched by simply not sending my password plain text every week.
I've read through a few messages on the forum so far, and have yet to see one that says "NO, PLEASE KEEP SENDING ME MY PASSWORD EVERY MONDAY. I CAN'T REMEMBER ANYTHING ON MY OWN". Sure, people are defending the admins on their decision, or people are saying "I don't get why it's a big deal". Frankly, it is a big deal. There's no way to turn the message off, and passwords should not be sent unprovoked on such a regular basis. It's poor security practice.
"People who use the same password everywhere deserve to get hacked" is faulty logic. "Secure your email" is a faulty argument. My email is plenty secure, and I do use a different password for sites where security is important.
My mail is delivered to my blackberry, so now my blackberry also has a copy of my password in plain text that I have to delete every week.
IMO, the admins here really aren't interested in the security concerns of their users, and that's troubling to me. I have yet to see a response from an admin that's a reasonable and responsible answer on this issue.
It's fine if you want to keep emailing me every week, I can filter that into a spam folder no problem. Just stop putting my password on everything. | |
|
| E-mailing of passwords
Posted: 7/21/2008 1:48:33 PM | I'd like to say I'm also against the emailing of passwords. A forgotten password link would be much more appropriate.
I have been registered on this site for almost a year now and have seen no major changes in that time. The layout is still based on tables, for instance, which is surely going to be hurting their bandwidth on a site like this. With a little cleaning up the developers could save themselves a pile of cash.
Also the design is nasty and inconsistent, and breaks in almost every browser. And there are spelling mistakes everywhere!
I'm digressing a bit but my point is that anyone with half a brain would have fixed these issues by now and that leads me to believe that no one is paying a great deal of attention behind the scenes. That's the impression I get anyway. | |
|
| E-mailing of passwords
Posted: 3/14/2009 10:55:03 AM | I was going to ask about this issue, too, but now it seems that I won't have to. The admin seems unwilling to change the policy of sending the password in every single email. I suppose the only solution is to stop using the service.
As the admin rightly pointed out, people should not use the same password for all sites; however, many people do. Knowing that fact, an admin running a site which appeals to more than just us geeks should probably change the policy of including the password in every email. What's particularly ironic about this policy is that pof DOES offer a "forgot password" link as well as an SSL certificate. The "forgot password" link makes the inclusion of the password in every email unnecessary; and the existence of the SSL certificate is rendered useless by the fact that the password is compromised every time the email is sent.
Funny, this. | |
|
| E-mailing of passwords
Posted: 4/2/2009 10:45:37 AM | It's amazing that this site has such a large security hole. Glad I'm not a paying member.
Someone should sit on the same network with an admin or a mod when they get their weekly 'matches' email to prove how easy it is to see clear text data on a network- it's just sniffing packets as they go across the wire*. I'm not trying to be an uber-geek here but this is just wrong. And the fact that there's no solution other than disabling all email notifications (which is undesirable) or deleting your account completely is rather disappointing. I believe those are the only "solutions" if I missed something else, please let me know.
There are a few threads on this topic most of which seem to link to the same threads- but none of them really address the problem, they say disable all email notification or GTFO. It's a valid concern when a robot sends out your password in clear text and the site admin refuses to change the behavior. Please reconsider this.
* Don't get me wrong, I'm not encouraging hacking- just making a point that it can be easily done. A lot easier than most may think. | |
|
| E-mailing of passwords
Posted: 4/5/2009 7:40:16 AM | | I agree, its bad practice for an admin to do this sort of thing. Update the database to store passwords as md5 instead of plan text, and stop emailing people their passwords. Provide an option to reset their passwords if they forget, and setup a hint for people that just needs reminded of what they made their passwords. This would be the best practice. | |
|
| E-mailing of passwords
Posted: 4/5/2009 10:07:56 AM | This has bothered me since the very first "new matches" message arrived. Why in hell would we need or want our password sent to us unless we requested a reset? Why is this still the case years later?
It's VERY bad practise! We can't verify the security or even the honest of any e-mail handler we use. Site staff, hackers or others using computers can often see such messages, and of course EVERY e-mail that goes across the US borders is scanned by the NSA. (Not paranoia - Canada debated and established policy to keep Canadian data from crossing those borders over 20 years ago.)
"It's only a dating site?" Imagine someone taking your account and sending a bunch of a-hole e-mails, rule violations and other things to discredit you, isolate you from those you're in touch with and perhaps even getting you blacklisted on many sites.
Seriously, this is a real no-brainer. Replace "Your password is XXX" with "If you forgot your password, click HERE" and lead that to a verification test.
ED BEAR | |
|
| E-mailing of passwords
Posted: 4/7/2009 11:29:52 AM | | And they send it in plain text in "New match" emails from Customer care, this is a massive security flaw that needs to be fixed. If it dosn't get fixed soon I am deleting my profile rather than risk someone hacking my account. | |
|
| E-mailing of passwords
Posted: 4/9/2009 10:36:26 PM | I agree, there is absolutely no valid or good enough reason to be sending passwords clear-text in an email every week. Twice a week now too, seems to be every Monday and Thursday for me. I don't understand why this hasn't been addressed yet... does the admin not care about his users security? What possible reason is there for including this password in an email twice a week?
It's horrible security practice and it needs to stop immediately before security conscious people decide to leave the site for one which cares about their users security. Not only is it horrible practice for us geeks, but it's just plain stupid in real life too. Use your common sense here admin, please.
Some examples to think about...
1) An ATM / ABM doesn't show you your PIN, does it?
2) Your voicemail doesn't repeat your password back to you, does it?
3) Your email provider doesn't send a text message to your phone with your password, does it?
I sure hope the answers are 'No' to the above questions. Beyond me why it hasn't been fixed yet. And not only has it not been fixed, it's now happening twice as often with "Customer Care" emails! Unbelievable.
I hope this gets addressed by the admin ASAP as this is such a glaring security hole.
-- Dustin | |
|
| E-mailing of passwords
Posted: 4/10/2009 10:15:23 AM | ^^^^^ Obviously, the Admin doesn’t feel there is a valid or good reason to change the format. It's been asked many times and answered. What personal info does POF have on you to worry about? I can’t think of anything personal I had to divulge in order to make my profile, not even my name.
The only way someone could see your password in those emails is if you gave someone access to your computer, the log in, password and the password to your private email account so if you would give them that why would you give a rat’s patootie if they had the password to a dating site?
1) I for one don’t keep a money account on POF.
2) Wouldn’t matter there is no personal information or money accessible through my voicemail either.
3) Same as answer two.
In my view this is much ado about nothing. | |
|
| E-mailing of passwords
Posted: 4/10/2009 9:12:56 PM | It's not nothing, it's a big deal if you have any kind of security conscience what-so-ever! Like I said, there is a reason your bank doesn't email you your PIN every week. It's just so simple, we just need to use our common sense... you don't send everybody their password in plain text twice a week! If you were smart and you ran a website, would you email your users twice a week? Would you EVER email them their password? And if so, what would be your reasoning behind it?
This whole 'debate' would end if it would stop being sent twice weekly. You don't, after all, hear people chanting "No wait, I always forget my password and don't know how to use the 'forgot password' link, I want it emailed to me at least twice a week!" I mean seriously, come on. It seems either people want it gone, like me and most others in the forums, or people don't care at all. But most definitely nobody is for the side of emailing it out twice a week.
So once again... let's use our common sense here... stop emailing it out twice a week! In fact, don't EVER email it out to anyone unless it was requested using the 'forgot password' link on the site. Sometimes, a little common sense would be nice in this world. | |
|
| E-mailing of passwords
Posted: 4/23/2009 3:26:54 PM | I am just as frustrated with this! I e-mailed POF about it and got a completely useless top on how to disable e-mail reminders entirely. I don't want to disable e-mail reminders enitrely; they remind me to check out the site. What I want is to not have some basic security violated and not have my password e-mailed to me in plaintext as part of routine.
I am therefore about to close my account, because I will not participate in a site that has such lax security. Sorry, POF, I'll go elsewhere... | |
|
| E-mailing of passwords
Posted: 4/23/2009 3:54:24 PM | All of my POF messages are sent to a disposable address and flagged as 'junk'.
I can look at them if I want, or ignore/delete them.
I took the initiative and responsibility for my own security
all my e-mail addresses require a unique password.
They can send whatever they like....it's a dating site...not my bank.
If I'm so worried that 'someone' may get a hold of my password...maybe a dating site is not the place for me.
~mizz | |
|
| E-mailing of passwords
Posted: 4/23/2009 4:26:33 PM | Wow... 3 + years since this thread was started and still no solution.
The only response I've seen from admin was
most of the people that complain are married, It acts as sort of a filter.
Huh?
You can't be serious.
Get a real job, Loser...
Quit using "admin" as a "title of respect"
How do you spell incompetent?
Fact is, some sites measure the "strength of password" as you type it to give some idea as to whether it's good or not. They do this because they know that not everyone on a computer is triple locked on the 3rd floor of some apartment building with nothing but their cat to worry about.
Some people share. Some use other comps.
Not all scenarios are the same.
If nobody really cares about the security of passwords why have them?
Just make them all "Huh?" by default.
Then when Guido at the door asks for the password, only Blondes and Admins will get in.
What a party that would be.
 | |
|
| E-mailing of passwords
Posted: 4/30/2009 10:30:01 PM | I think every Monday & Thursday we should update this thread so the moderator keeps hearing about it. I know I'll try to do my part. It's hard to understand the reasoning behind this behaviour on a site as popular as Plentyoffish.com. Doesn't make any sense to me what-so-ever. I really want to see some change, or at least a good reason from the admin as to why this is still happening. Come on Markus, almost everyone wants this off our emails, so please make it so!
-- Dustin | |
|
| |
| E-mailing of passwords
Posted: 5/5/2009 8:03:24 AM | Got a newsflash for ya ^^^^ He isnt reading this thread. LOL
Moderator (there is only one at the moment I think) have no control over site changes. This has been requested since like 2005. The Admin replied in this thread to his position on the subject.
Good luck on your crusade. Ya really think a few people posting in this thread every week or so out of a million active users a day will change his mind? I really really doubt it.
Cowboy | |
|
| E-mailing of passwords
Posted: 5/6/2009 9:37:02 AM | Cowboy, this is about all we can do for now to get his attention. I realize it has been requested for a long time, but only recently back on the table, the forum was dead for a while in between. I think with enough persistence we can change his mind. I mean it's a very simple change to make, should take him no more than a few minutes to do and it'll make such a large percentage of his members much happier, and protect those members who don't even know it's an issue.
Ya really think a few people posting in this thread every week or so out of a million active users a day will change his mind? I really really doubt it.
That's because you're not looking at the bigger picture. Keep in mind many of those millions don't use the forums or even know how ot do it. So many of those millions could very well agree with this threads purpose but won't participate in it. If one person recommends something, I think it's safe to assume a few thousand (in the case of this site) agree too. And with how many people wanting this changed on this thread alone, that would then represent a large percentage of the community of fish. :)
-- Dustin | |
|
| E-mailing of passwords
Posted: 5/6/2009 10:12:33 AM | Your not listening here.
ONE MAN controls changes to this site. He has been quoted in articles on the internet saying he knows better then the members here what is good for this site. HIS VISION of what is right and whats needed control this site. He doesnt care what you think or want. It wouldnt matter one iota if 1000 people a day sign a petition wanting those passwords not sent.
He probably will never see your comments.
He posted at the start of this years ago and shared his feelings.
If 1000 people a day left this site and left testimonial messages saying they did so because he was sending plain text passwords twice a week you might catch his eye.
But that isnt happening.
And with how many people wanting this changed on this thread alone [/quote} LMAO! Your pulling my tail right? You really believe that? Your delusional... Look he discontinued the IM a couple weeks ago. http://forums.plentyoffish.com/datingPosts12169123.aspxThat thread complaining about it has 525+ posts and is one of probably 20 or 30 threads started and hundreds more posts left in them. He doesnt care get it now? Markus does what he wants. He doesnt care what you think. If he did he would of reinstated the IM service. Your thread is years old and has 43 posts many from the same people multiple times. Your wasting your time whining once a week. Cowboy | |
|
| E-mailing of passwords
Posted: 5/6/2009 11:39:03 PM | Cowboy, I am fully aware of how this site is run. I'm attending the same school as Markus, in the same program as Markus -- so I am quite aware of him and how he operates. It is you who is not listening. This is the ONLY way to get a hold of him at all, so if this is the only way then this will be the way we try to get through to him. Secondly, he does care about these threads to some extent, or why would he bother having them set up and spend the time administering it?
Further more, he didn't continue the IM service, the IM service provider (Userplane) has shut down its doors because AOL is no longer operating it. Markus had no option except to find a new one which he is still not sure about. We may get one in the future or we may not. I quote Markus here on the forum I noticed you yourself commenting on. Obviously you did not read it very well.
Evidently userplane is being discontinued by AOL, or so i'm told by june 15th.
I'm simply throwing my support being the OP about having our passwords removed from the email which we get twice a week now. If you have an objection to the topic in this thread, please post your reasons to it. If you are for it, please leave your reasons too. If you are here to just tell me how Markus doesn't reads these things and doesn't care, then you should learn that A - you sure seem to ;) and B - I'm not going to stop just because you tell me it's useless. If you have nothing constructive to contribute, please stop posting here.
And if you are going to continue posting here, you should learn how to use the quote system correctly ;)
Good day.
-- Dustin | |
|
| E-mailing of passwords
Posted: 5/7/2009 9:42:06 AM | It's still happening, just got another one today. Markus, please remove these passwords from our emails.  | |
|
| E-mailing of passwords
Posted: 5/11/2009 7:02:29 PM | | It's still happening, come on Markus, please make the change. | |
|
JKLF96
|
Joined: 4/21/2009
Msg: 48 | |
| E-mailing of passwords
Posted: 5/11/2009 7:35:31 PM | | I can see Marcus's point about it being a bit of a filter for married people, I never really thought of it like that, If ya got nothing to worry about who gives a shit.... | |
|
| E-mailing of passwords
Posted: 5/12/2009 10:59:28 AM | | Dustin--you say you're attending the same school as Markus, etc, etc, making it sound like you actually know him. If this is true, then why do you bother posting a message to him here? Just talk to him about it when you see him at school. Also, if this is the only method of actually contacting him, I would like you to pass along a message about other issues I'm having, that in the forums I'm getting no help with. OK? I'm not able to send messages to anyone. They're not being blocked, they just vanish into thin air. I get the "message sent'' notice, then they don't show up on my sent list. Nor can I receive messages; I had a friend try and nothing came through. My forum posts vanish too. If this stays more than a few minutes I'll be surprised. Can you passs that on to him for me? Thanks. | |
|
| E-mailing of passwords
Posted: 5/12/2009 2:43:22 PM | Markus/Admin/Big Fish can be contacted through his profile just like anyone else here, as long as you fit the three limits he has at the bottom of it.
The emailing passwords has been asked, suggested and answered numerous times. There is no “issue” unless someone else has access to the email account your notifications are sent to, hence his answer in message 23. Some of the other people that complain about the passwords are just under some paranoid delusion that some secret personal information can leak out from their POF account, the site doesn’t even ask for your real name or a false one, no name at all in fact. No personal info except what you enter into the profile itself. This is the reason why the concerns are poo- pooed by the admin and the mods.
As to the
OK? I'm not able to send messages to anyone. They're not being blocked, they just vanish into thin air. I get the "message sent'' notice, then they don't show up on my sent list.
Anyone, at all, ever? What friends have you had try to email you….other males? You block males. Other women? Do you they meet all your restrictions???? One of the biggest culprits of problems with emails is the “Within 75 miles” filter.
Try emailing trappedonbayst the moderator that posted in message 22, he has no filters at all anyone should be able to email him and see if it goes through.
| |
|
Home
login 
