raxacoricofallapatorius
Reputation
241
Next privilege 250 Rep.
View close votes
Badges
1 3 11
Newest
 Commentator
Impact
~5k people reached

Apr
8
comment Is it common practice to allow frequent flyer account access with easily available personal details?
@reirab: They used the miles for a hotel reservation.
Apr
8
comment Is it common practice to allow frequent flyer account access with easily available personal details?
@RoflcoptrException: Yes, I get that. I was asking about. What I was confused about was attempting to confirm that was deemed unhelpful (or at least not "helpful").
Apr
8
comment Is it common practice to allow frequent flyer account access with easily available personal details?
@RoflcoptrException: Yes, but that's not the issue. I flagged to avoid violating any policy the site might have in this case regarding naming and shaming and to get guidance from a mod about any specific steps to take. It's a loose loose situation with mods I suppose, as it always is.
Apr
8
awarded  Commentator
Apr
8
comment Is it common practice to allow frequent flyer account access with easily available personal details?
@RoflcoptrException: OK, I'll name. I want to give them one more chance to respond though, especially to make sure I'm not misrepresenting any facts. Also, my flag have been "helpful" rather than "declined": I was seeking clarification, not disagreement?
Apr
7
comment Is it common practice to allow frequent flyer account access with easily available personal details?
Just to be clear: I need my account number and password to log on. But one can give the items listed over the phone to use miles or have personal data recited; or use them to change the e-mail address (without requiring confirmation at the old address!) from which point the account can be usurped. I had my miles drained and (since I noticed that) was able to get the attempt to change the e-mail interrupted. But the only "security" I now have is the use of a made-up street address (per their suggestion). My stolen miles have not been credited.
Apr
7
comment Is it common practice to allow frequent flyer account access with easily available personal details?
@Tom: I'd like a mod to weigh in on whether that's appropriate.
Apr
7
comment Is it common practice to allow frequent flyer account access with easily available personal details?
@Gagravarr: Mayne. But this is a (very) big fish.
Apr
7
comment Is it common practice to allow frequent flyer account access with easily available personal details?
@Tom: There suggestion for dealing with this issue is to change my address to a made up one (and to change it back before flying to avoid issues at the airport)!
Apr
7
comment Is it common practice to allow frequent flyer account access with easily available personal details?
@Tom: I've confirmed (astoundingly) that it is possible for someone with the details above to change my e-mail address without further confirmation (except a notification confirming the attempt to the old address, with no direct opportunity to confirm or cancel it). Once the address has been changed, a password reset using that address is possible, resulting in full takeover.
Apr
7
asked Is it common practice to allow frequent flyer account access with easily available personal details?
Apr
7
awarded  Yearling
Apr
7
accepted If I use TSA Pre-Check, can I still enter security through the first class line?
Apr
7
accepted What is a good Lake District base for hiking?
Apr
1
awarded  Caucus
Aug
25
awarded  Nice Question
Apr
24
comment What is a good Lake District base for hiking?
Bus is fine, as long as it's reliable and conveneint (no changes or waits, if possible), and not too long a ride (say 30 min). The crucial thing is that, once there, it's a good base for moderate to intermediate hikes (right out the door, if possible), and a really nice (possibly luxurious) place to return to in the evening. Good food and places a village with amenities and things to see (especially of the water turns), wold be a plus.
Apr
24
asked What is a good Lake District base for hiking?
Apr
17
awarded  Excavator
Apr
17
awarded  Editor