Untitled attachment

Notices where this attachment appears

1. Embed this notice
   Jonathan Kamens (jik@federate.social)'s status on Monday, 16-Sep-2024 02:41:53 JST Jonathan Kamens

   Over at PatientWallet.com, they got several things wrong. First, after I entered my new address and saved the change, it popped up a dialog asking me to enter my password to confirm, _and the password field was already filled in._ I do _not_ have any sort of autofill enabled in my password manager. I have no idea how or why this happened, but however it happened, it's really broken. (continued)
   #ChangeOfAddress
   🧵

2. Embed this notice
   Jonathan Kamens (jik@federate.social)'s status on Monday, 16-Sep-2024 02:41:52 JST Jonathan Kamens

   in reply to

   More PatientWallet.com... After I changed my address, the site sent a single confirmation email to both my old and new addresses; the new address was in the To line and the old address was BCC'd. This is a bad idea for several reasons, the biggest one being that not including the recipient address in the To header increases the spam score of the message significantly, so it's more likely to end up in the user's spam folder. (continued)
   #ChangeOfAddress
   🧵

3. Embed this notice
   Jonathan Kamens (jik@federate.social)'s status on Monday, 16-Sep-2024 02:41:51 JST Jonathan Kamens

   in reply to

   More PatientWallet.com... In addition to the address change notification, the site also sent a separate, entirely redundant and unnecessary "Your PatientWallet user details have been changed" message.
   Also, both this and the email address change notification were sent _before_ the "Please verify your email address" message was even sent, let alone before I clicked the link in that message to confirm the change. (continued)
   #ChangeOfAddress
   🧵

4. Embed this notice
   Jonathan Kamens (jik@federate.social)'s status on Monday, 16-Sep-2024 02:41:50 JST Jonathan Kamens

   in reply to

   More PatientWallet.com... When I clicked the link in the "Please verify your email address" message to confirm the new address, the site loaded, and there was a banner at the top telling me that I needed to confirm my address, _which I had just confirmed by clicking on the link which brought me to that page_.
   This is some amateur hour stuff, seriously.
   #ChangeOfAddress
   🧵