WHID 2009-17: Passwords are optional at SpeedDate

Share/Save

TechCrunch reports that for a short period of time, SpeedDate, an online dating service did not require a password. If you knew someone's user name you could login. Talking about "lack of sufficient authentication controls..."

 

Attack Method: 
Insufficient Authentication
Incident Outcome: 
Leakage of Information