Patreon patrons: It's password-reset time Popular Internet patronage and crowd-funding site Patreon has been popped, with user data stolen. This short notice at the site says, however, that it didn't keep credit card numbers on-site, and believes that the most important user data remains protected – “all passwords, social security numbers and tax form information …
I mean seriously, the people working at that company think having a login screen that depends on external Javascript is a good idea. They ignored bug reports for _months_. They work with newbie web developers who apparently pride themselves in their experience (at least the Patreon website does).
"I mean seriously, the people working at that company think..."
Amen to that! Seriously, "script kiddie" is an academic title compared to the level of crass amateurism going on on that site. I have to reload the front page about three times on average just to have it finally load at all. You get completely different front page for the exact same URL coming from outside or from within the site. You can search directly for a creator's name (featured prominently IF you find the guy by other means) and get zero results just because it's not their page's "official title" (so you better know that one or have a direct link...). There is absolutely no way to prod them to re-try charging your card for pending pledges if you ever hit a snag - you just try to muck with your payment details randomly hoping they'll retry when you hit "update" on the exact same card; sometimes they do, sometimes they don't. You can write them with explicit complaints and they'll thank you, admit you're right and promise to do something about it ASAP then of course nothing ever happens. It's just... ridiculously bad.
Having been emailed to remind me that I had a Patreon account which I'd forgotten that I'd created, I promptly set about deleting the account, only to discover:
1. You have to email them from your account's email address (not useful if you're using inbound aliases);
2. According to this recent Reddit topic, "deletions" are processed manually/slowly and actually consist of putting your account into a private mode, not deleting your data.
Am I securitying proper?
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
