ttj - Tom Jones

I have documented several times the worsening trend for companies to discard customer login information and force account resets, usually by an emailed link.  This is often accompanied by gaslighting the customer into thinking the customer themselves has forgotten their password.  The customer may also be required to lie in order to reset their password, for example by incorrectly stating that they have "forgotten" their password. Having worked in various IT departments, it is not hard to imagine the incompetence and chaos surrounding "decisions" to discard whole databases of customer authentication data, and force everyone to reset their passwords.  It is not so much a "decision" as a drool by an intermediate-level mammal down its own chin, accompanied by jumping up and down and grunting. It started out quite mysteriously, unable to book a ticket, because unable to log in, indicated simply with "Error / Login Failed": Already, there is a sign of...

I just tried to buy tickets from airline Aurigny. Instead of being under Aurigny.com like normal, it went to videcom.com, which I'd never heard of.  I pasted in my email and password before noticing, so may have sent them to the hacker by mistake!  The fake web site said my login had failed, even tho I put in the right password: Note that the options are "login" and "I forgot my password".  If this wasn't a fake web site, then it would be another case of the web site operator not bothering to preserve customer passwords, and then forcing password resets by email by lying to customers and telling customers that it's the customer who's forgotten the password.  This happens a lot.  I thought I had a tag for it, but can't find.  So projection_of_forgotten_password_from_web_site_to_user it is.  Ah yes, I think it's forced_bogus_account_rescue. If Aurigny are doing this deliberately, then it's obviously bad.  The domain is all the user can be e...

 I remember around 15 years I had an Easyjet account, and it was pretty easy to use.  It wasn't perfect, but it worked.  You could log in, book a flight, stuff like that. Instead of being for logging in and booking flights, Easyjet have decided to make their 2021 web site be for showing obscure programmer error messages, and forcing account resets for no reason by switching a workflow from web to email half way through.   At least Easyjet had the decency to just say "You need to reset your password", instead of pretending I'd forgotten my password, like some other web sites. Previous instances of web sites forcing resets by email just for the sake of it include spammers Uber [0] and incompetents TAP Air Portugal [1]. [0] https://wibblement.blogspot.com/2021/12/uber-spammers-glitches-annoyances.html  [1] https://wibblement.blogspot.com/2021/11/tap-portugal-web-site-fails-differently.html   An hour later and the password reset still hasn't arrived.  S...