Mastodawn

Jonathan Kamens 86 47 Oct 12, 2024

After I changed my email address in the #NJTransit ticket app, they sent me an email message ➡️ 23 minutes later ⬅️ confirming the change. Then they sent a second, duplicate email two minutes after that. Both of these emails were sent to the new email address on my account; they did not sent a notification email to the old address. *sigh*
#ChangeOfAddress 🧵

Jonathan Kamens 86 47 Oct 12, 2024

When I attempted to log into my #Nextdoor account (which, to be clear, I do not use anymore and have no plans to use again because Nextdoor is a cesspit) to change my email address, it claimed that it was sending a login code to my email address to complete the login, but the code email never arrived. Par for the course for Nextdoor, I suppose.
#ChangeOfAddress 🧵

Jonathan Kamens 86 47 Oct 12, 2024

Over at #Cisco #OpenDNS (https://opendns.com/), when I enter a new login email address, it says it's sending me an email message to confirm the change, and indeed it does send the email, but clicking the confirmation link doesn't work. I tested this with non-anonymized addresses, not just an #AnonAddy address, so apparently this functionality is simply broken. Way to go, Cisco!
#ChangeOfAddress 🧵

Cloud Delivered Enterprise Security by OpenDNS

Predict and prevent attacks before they happen using our cloud-delivered enterprise security service. Protect any device, anywhere with OpenDNS.

OpenDNS

Jonathan Kamens 86 47 Oct 12, 2024

I tried to change my email address at https://pushover.net. It said it was sending a verification email, but it never arrived. I clicked the link to generate another verification email, and it again said it was sending it, but it never arrived. Instead, I received a "Welcome to Pushover!" email to my _old_ email address, the one I'm trying to change. *sigh*
#ChangeOfAddress 🧵

Pushover: Simple Notifications for Android, iPhone, iPad, and Desktop

Jonathan Kamens 86 47 Oct 12, 2024

Over at https://intuit.com/, which is notoriously bad at account management, after I changed my email address the page displaying it asserted that the new address was "Verified" even before I clicked on the link in the confirmation email. Browsing away from the page and back to it didn't change this. It only changed to "Not verified" when I used the browser refresh button to reload the page. Such an easy thing to get right, so embarrassing that they got it wrong.
#ChangeOfAddress 🧵

Intuit®: Complete Financial Confidence

See how Intuit products can work for you by joining the approximately 100 million people who are already using TurboTax, Credit Karma, QuickBooks, and Mailchimp to power their prosperity.

Jonathan Kamens 86 47 Oct 12, 2024

Not to be outdone by Intuit, https://salary.com/ said on login that my password was expired and had to be changed (bogus!), but then it wouldn't allow me to change my password because the password change form enforces current password validation rules (must have a special character) on my _old_ password even though it was created so long ago that those rules were not in effect.
I had to do "Forgot password?" to change it.
Why are software developers so bad at their jobs?
#ChangeOfAddress 🧵

Salary.com – Unlock the Power of Pay

Know your worth. Inform your career path by finding out what you should earn. Use your customized salary estimate to negotiate pay with confidence.

Salary.com

Jonathan Kamens 86 47 Oct 13, 2024

#TransAmerica wins the prize for the worst pointless #SecurityTheater I've encountered while anonymizing my online account email addresses.
I had to:
* enter an emailed code and answer a security question to log in;
* agree to new terms, then enter another emailed code;
* answer another security question to get to my profile page; and
* type my new email address instead of pasting it (the "Don't Fuck With Paste" extension fixed that!).
(continued)
#infosec #ChangeOfAddress 🧵

Jonathan Kamens 86 47 Oct 13, 2024

(#TransAmerica security theater continued)
After all that, they didn't require me to click a link sent to my new email address to confirm the change and prove that I had access to that mailbox! They did all that crap, and didn't do the one real, substantive security thing that should be done as part of an email address change. Unbelievable.
#ChangeOfAddress 🧵

Jonathan Kamens 86 47 Oct 13, 2024

This is what happened when I tried to change my email address for my #PlaystationNetwork (#PSN) account to an #AnonAddy email address. I don't know whether this is specific to AnonAddy addresses or whether the address change workflow is broken in general. 🤷 I've said it before in this thread, but it bears repeating: web sites should not be blocking people from using anonymized email addresses for security and privacy reasons.
#ChangeOfAddress 🧵

Jonathan Kamens 86 47 Oct 13, 2024

https://starbucks.com/ said the password in my password manager was invalid, so I did a password reset. When prompted to choose a new password I entered my current one, which it accepted and said my password had been changed. Once again, however, it wouldn't let me log in. So I went through the password reset process again, and this time specified a new password. Again, it said it worked. Again, it wouldn't let me log in with the newly changed password. 🤷
#ChangeOfAddress 🧵

Starbucks Coffee Company

More than just great coffee. Explore the menu, sign up for Starbucks® Rewards, manage your gift card and more.

Jonathan Kamens 86 47 Oct 13, 2024

https://ticketmaster.com/ let me enter a new email address, sent a code to my old email that I needed to enter to confirm the address change, then after all that popped up a message saying "We have temporarily disabled email address changes, if it's an emergency contact customer service" and reverted the address change. 🤦
#ChangeOfAddress 🧵

Jonathan Kamens 86 47 Oct 14, 2024

In the hour and 6 minutes since I changed my email address at https://uber.com/, they've sent me 10 identical "Jonathan, your Uber account email was updated" email messages, spaced apart by 4–11 minutes, all to my old email address rather than the new one.
#ChangeOfAddress 🧵

Earn Money by Driving or Get a Ride Now | Uber Germany

Get a ride in minutes. Or become a driver and earn money on your schedule. Uber is finding you better ways to move, work, and succeed in Germany.

Uber

Jonathan Kamens 86 47 Oct 14, 2024

https://verizon.com/ has separate "User ID" and "Primary email" fields, which seems silly since the User ID is required to be an email address.
You have to change them separately even if they are both the same thing and you want them to be the same thing again after you change them.
Verification works for the User ID just fine. But I requested several verification emails for the Primary email, and none of them arrived. 🤦
EDIT: Finally showed up 10 minutes later.
#ChangeOfAddress 🧵

Verizon: Wireless, Internet, TV and Phone Services | Official Site

Shop Verizon smartphone deals and wireless plans on the largest 4G LTE network. First to 5G. Get Fios for the fastest internet, TV and phone service.

Verizon

Jonathan Kamens 86 47 Oct 14, 2024

https://vimeo.com/ slightly limits what your account can do until you've verified your account email address. After changing my account email address to an #AnonAddy address, I've requested a verification email three times, and none of them have arrived.
EDIT: The emails never arrived, but I opened a support ticket and their support people marked my address as verified instead of fixing the address verification problem. 🤷
#Vimeo
#ChangeOfAddress 🧵

Vimeo AI-Powered Video Platform

The video platform trusted by 287 million creatives, entrepreneurs, and businesses. Everything you need to create, manage, and share stunning videos.

Vimeo

Jonathan Kamens 86 47 Oct 14, 2024

https://caremark.com/ is a doozy. My password manager said to log in using my email address as my username, which worked fine. When I went to update my email address in my profile, I saw that there was a separate username field with a random number as my username. I changed the username to something else, and logged me out and told me to log back in with my new username. Which... didn't work. I still had to log in with my email address.
(continued)
#ChangeOfAddress 🧵

Jonathan Kamens 86 47 Oct 14, 2024

(https://caremark.com/ idiocy continued)
So I changed my email address, and then logged out and tried to log back in again, and I _still_ need to log in with my old email address, even though it is no longer displayed anywhere in my account settings. How do you even break things this badly? 🤦
Also, after I changed my username and email address, they sent me the attached email message. *sigh*
#ChangeOfAddress 🧵

Jonathan Kamens 86 47 Oct 14, 2024

Trying to change my email address at https://discountfilters.com/ was a disaster, but if you read my blog you already know they're shady (https://blog.kamens.us/2024/01/11/buyer-beware-discountfilters-com/).
I tried changing my address. They claimed they were sending a verification email but it never arrived.
I then tried logging out and logging back in with the new address. They sent me an email with a link to "access your account." I clicked that link and it logged me into a NEW ACCOUNT with that address. 🤦
#ChangeOfAddress 🧵

Discount Filters | Air & Water Filters For Your Home

High-quality filters for your furnace, air conditioner, refrigerator, pool or spa at unbeatable prices! Fast Shipping & Compatibility Guarantee

Discountfilters.com

Jonathan Kamens 86 47

https://transunion.com/ continues its pattern of being, like all the other credit reporting agencies, the worst. They sent me the below email after I updated my email address. One problem: it says I should call them if I didn't update my password, which I didn't, I updated my email address!
Furthermore, if you try to change your username and your password at the same time on the account settings page, it falsely claims that the old password you entered is incorrect. 🤦
#ChangeOfAddress 🧵

Jonathan Kamens 86 47 Oct 14, 2024

Over at https://tripplite.eaton.com/, there's no way to edit the username / email address on your account. They've buried the "Delete account" button on the "Password" tab of the account settings pop-up for some inexplicable reason. And if you click the "Delete account" button, the message telling you that your request was submitted successfully is inserted onto a different tab of the pop-up so you don't see it unless you switch to that tab. 🤦
#ChangeOfAddress 🧵

Eaton - Strom-und Konnektivitätslösungen

Eaton provides products and expert advice to help its customers safely power and connect their computers and electronics.

Eaton Website

Jonathan Kamens 86 47 Oct 14, 2024

Mission accomplished! I've reviewed the entire contents of my password manager and anonymized my addresses wherever it was possible and appropriate.
Final statistics:
I started with 1,262 items, of which I deleted 465 (37%)!
I skipped 120 items of the wrong type, e.g., secure notes.
I skipped 292 more items with good reasons not to anonymize .
I anonymized 386 (76%) of the remaining 505. I was unable to anonymize 118 (23%) for various reasons.
#infosec #privacy
/end #ChangeOfAddress 🧵

Jonathan Kamens 86 47 Oct 15, 2024

P.S. Blog posting with background about why what I did is a good idea, and some alternatives for how to do it, as well as more details than I posted here about how I did it myself:
https://blog.kamens.us/2024/10/14/case-study-anonymizing-email-addresses-for-online-accounts/

Case study: anonymizing email addresses for online accounts

Why you might want to anonymize the email addresses for your online accounts, some techniques for how to do that, and the details of how I did it myself, including stats, stories, and scripts.

Something better to do

Jonathan Kamens 86 47 Nov 1, 2024

Addendum: On Sep. 8 I asked Condé Nast to delete my data: https://federate.social/@jik/113104350128502899
They finally got back to me today, nearly 2 months later, with this response: "Your request cannot be completed at this time. inactive subscriber"
I believe the technical term for describing this response is "bullshit."
That I am an inactive subscriber shouldn't prevent them from deleting my data. The whole reason why I asked them to is because I'm not an active subscriber so they don't need it!
#ChangeOfAddress 🧵

Jonathan Kamens (@[email protected])

There is no way to delete your https://newyorker.com/ account yourself or change the email address. I searched and found https://www.reddit.com/r/privacy/comments/1elpnzd/how_to_for_privacy_data_removal_from_wired/, which claims you can email [email protected] to demand that they delete the account, which I don't need anymore since I no longer subscribe to any Conde Nast magazines (their treatment of Erin Overbey saw to that!). We'll see how that goes. #ChangeOfAddress 🧵

federate.social

Jonathan Kamens 86 47 Oct 22, 2024

Addendum to my #ChangeOfAddress 🧵: I had no trouble changing my address at spirit.com (#SpiritAirlines), but afterward they started spamming me at the new address. This isn't surprising; several sites did that. What's different is that when I try to unsub from the Spirit #spam, it claims I'm already unsubscribed.
After navigating their live chat for 20+ minutes about this, they opened an escalation ticket about it. The confirmation email says it could take up to 30 days for them to respond. 😡

Jonathan Kamens 86 47 Oct 22, 2024

P.S. I suspect I could have solved this by resubscribing to their spam, saving that setting, and then unsubscribing and saving the setting again. But I'm an old cuss and I want to see what they say about this obvious bug in their system, so I'm going to leave things the way they are for the time being and we'll see what happens.

helplessduck Oct 22, 2024

Christ on sale! This is _STILL_ happening?

Jonathan Kamens 86 47 Oct 22, 2024

@helplessduck Oh, I finished the anonymization project a week ago. This is just the long tail... it took me a week to realize what was going on with the Spirit spam.

Rachel Oct 15, 2024

@jik Wow, what a journey!