Slashdot Mirror
Websites Still Failing Basic Privacy Practices
DigitAl56K writes "Large companies still can't seem to get the basics of privacy and security on the Web pulled together. Today I went to enter a competition from Duracell to win a Nintendo Wii by filling out an online form. It requires entering your full name, address, and date of birth, and then proceeds to submit it via an unencrypted HTTP POST. The ultimate irony is the message at the bottom of the page that reads: 'Trust is a cornerstone of our corporate mission, and the success of our business depends on it. P&G is committed to maintaining your trust by protecting personal information we collect.' Which websites have you found to be lacking in their basic privacy practices?"
I am gay but will not give to national gay organizations. They look up your telephone number and sell your information to other organizations. Give once and soon your phone will be ringing off the hook by telephone solicitors. Plus they disclose none of this on their web sites. They do not seem to regard privacy as any concern.
I run a copy of Wireshark whenever I'm at a coffee shop, airport lounge, or anywhere else there is a wireless hotspot.
In other words, you're part of the problem.
So what are you going to do with those packets you've sniffed?