tag:blogger.com,1999:blog-28687371.post-55815483635850671102008-01-15T15:56:00.000-08:002008-01-15T15:56:00.000-08:002008-01-15T15:56:00.000-08:00Funny, I told IDG about this problem back in 2003, along with another problem which they <B>did</B> fix...<BR/>I managed to find the email I sent them:<BR/><BR/>Date: Thu, 13 Nov 2003 13:38:23 -0500 (EST)<BR/>From: Justin A <...><BR/>To: stephen_athan@idg.com<BR/>Subject: Problems with linuxworld (and other?) registrations<BR/><BR/>The registration system... sucks.<BR/><BR/>If you are at<BR/>http://linuxworldexpo.com/linuxworldny/V40/index.cvn?ID=10128<BR/>and click "REGISTER NOW!"<BR/>it asks for some information, if you then enter say,"j" for first name, and continue, you then get:<BR/><BR/>"We have the following possible matches based on your lookup information. If you see a record listed here that matches your information, you can choose it to view a confirmation of your registration. If you are not listed here, and would like to begin a new registration, click the 'Next' button to continue."<BR/><BR/>Followed by the names and information of everyone who registered with the first name starting with 'j'<BR/><BR/>This is compltely opposite of your privacy policy, which states: "The information we collect is used to improve the content of our Web page, not shared with other organizations for commercial purposes."<BR/><BR/>Now I would really like to register, but not if anyone can look up my information...<BR/><BR/>Also, the priority codes are visible but hashed with md5. Since they are so short, it only takes about 5 hours to crack them all.Justinhttp://www.blogger.com/profile/07567730572096907480noreply@blogger.com