Websites Still Failing Basic Privacy Practices
DigitAl56K writes "Large companies still can't seem to get the basics of privacy and security on the Web pulled together. Today I went to enter a competition from Duracell to win a Nintendo Wii by filling out an online form. It requires entering your full name, address, and date of birth, and then proceeds to submit it via an unencrypted HTTP POST. The ultimate irony is the message at the bottom of the page that reads: 'Trust is a cornerstone of our corporate mission, and the success of our business depends on it. P&G is committed to maintaining your trust by protecting personal information we collect.' Which websites have you found to be lacking in their basic privacy practices?"
Whitehouse.com seems to have no regard for the security of web visitors.
The big sites *must* be interested in privacy. They're plastered with security and privacy notices.
No, I'm not "first and last name."
you're first and last name?
Oh c'mon - it's YOUR not you're
I sniffed the password to a Slashdot account! Yours! And I'm using it to post a reply to your post!
I put in some fake credentials to test it out, but unfortunately the email address asdf@asfd.com was already in use...