WHID 2009-17: Passwords are optional at SpeedDate

Updated: 
5 February 2009
Attack Information
WHID ID: 
2009-17
Date Occured: 
3 Feb 2009
Attack Method: 
Outcome Information
Target Information
Attacked Entity Field: 
Entertainment
Attacked Entity Geography: 
USA

TechCrunch reports that for a short period of time, SpeedDate, an online dating service did not require a password. If you knew someone's user name you could login. Talking about "lack of sufficient authentication controls..."