Notices by Jonathan Kamens (jik@federate.social), page 10

My health insurance company (at least until the next open enrollment period), GEHA, doesn't allow the email address used for login to be changed without contacting customer service on the phone. 😠 🤡
#ChangeOfAddress 🧵

I tried to log into my old https://chase.com/ account to change my email address there; I still have an account even though I don't have a Chase credit card anymore. But after entering my username and password it said, "We've locked your account due to unusual activity. Please call # for assistance." Yeah, no, I'm not about to try to explain to a customer service droid, "I don't actually have a Chase card anymore, I just want to change the email address on my account." 😝
#ChangeOfAddress 🧵

https://actionnetwork.org/ allowed me to change my email address without sending a notification to the old address or a verification email to the new address. Awesome! Not.
#ChangeOfAddress
🧵

(https://costco.com/ continued)
Why are they asking me to verify my OLD email address? What if I no longer have access to it, and that's why I'm changing it?
Why are they asking me to verify my identity when I just logged in with my password literally 30 seconds ago?
Finally, they didn't ask me to verify my NEW email address after I changed it!
Absolutely ridiculous. The product managers and engineers who designed this workflow are incompetent.
#ChangeOfAddress 🧵

https://account.arin.net/, the American Registry for Internet Numbers, will not let me add an addy.io email address to my account. Regarding this refer to my earlier statement about Apple (https://federate.social/@jik/113107287492451639).
#ChangeOfAddress 🧵

To change the email address on my Mozilla Account (https://accounts.firefox.com/), I had to first enter the new address as a secondary address, then make it the primary, then remove the previously primary address. Firefox Sync automatically switched over to the new address without any disruption. The transition on https://addons.thunderbird.net/ was automatic and seamless as well. Kudos to Mozilla!
#ChangeOfAddress
🧵

At https://adobe.com/, the link for managing your account isn't in a common UX location, it's under the "Help & Support" menu. Not terrible, but not great. Changing the address was straightforward, but after I did it, it sent two notification emails to the old address instead of just one.
#ChangeOfAddress
🧵

An interstitial page popped up upon login to https://microcenter.com/, demanding that I provide my mobile phone number. Skipping this step was not an option. I don't give my phone number to sites that demand it, so I contacted their customer service via chat and asked them to delete my account. They asked for the email address associated with the account and then deleted the account without first sending me email to confirm that I'm the legitimate owner of the address. #smdh
#ChangeOfAddress
🧵

https://appsumo.com/ won't let me add addy.io addresses to my account. It claims it's adding them but then just... doesn't. Terrible UX.
Also, their privacy policy (https://appsumo.com/privacy/) has the text "EMAIL HERE" scattered throughout the document; they updated the links but not their text. 🤡
#ChangeOfAddress 🧵

There's no way to change the email address associated with my account on https://lenovo.com/, and no instructions I could find for how to do it. I had to Google "how to do I change my lenovo id email address," which brought me to https://support.lenovo.com/us/en/solutions/ht508913-lenovo-id-how-do-i-change-the-primary-email-account-on-my-lenovo-id; the instructions there worked.
#ChangeOfAddress
🧵

I only have an account at https://zoho.com/ for Zoho Bookings, but when I logged in today, it spontaneously created a Zoho Mail email address for me without asking me if I wanted it to do that. Not cool! That aside, I did not have any trouble adding my addy.io email address to Zoho and then removing my real address.
#ChangeOfAddress
🧵

Once I entered my new email address at https://acer.com/, it took much too long to display the verification page. After I entered the verification code sent to the new email address, it took much too long to accept the code and confirm that the change was complete. Then it logged me out and I had to log back in again.
#ChangeOfAddress
🧵

On https://efax.com/, they've changed their login system so that when you're using your fax number as your username to log in, you can no longer include the hyphens in the number, a completely gratuitous and unnecessary change.
In their app your email address appears on two different tabs in your profile but it's only editable on one of them.
Honestly, in all the many years I've been using eFax, they've never been good at UX.
At least I was able to change my address. 🤷
#ChangeOfAddress 🧵

Today I started going through all of the accounts in my password manager with my email address as username and switch each of them to a dedicated https://addy.io/ address, to increase my security, protect my privacy, and enable me to know when a site sells my email address or they have a data breach.
For some sites the change was smooth. For others, not. This thread chronicles the "interesting" results.
#infosec #cybersecurity #privacy #ChangeOfAddress
🧵

https://aarp.org/ said they were sending email to confirm the change. I clicked the link in the email, and it loaded the web site but didn't display any sort of message confirming the change. I viewed my profile and it said the new address was still unconfirmed. I tried clicking the link in the email again, and it said it wasn't valid and I should call customer service during business hours. Nevertheless after logging out I was able to log back in using the new address.
#ChangeOfAddress
🧵

https://eventbrite.com/ has problems.
After log in, the banner at the top still says "Log In" for several seconds before it spontaneously changes to show you're logged in.
The address change pop-up is unclear whether to enter your new or old address (see screenshot).
After you change your address, there's no message indicating it was successful, and the web page continues to display the old address until you refresh.
They send confirmation to your old address, not the new one.
#ChangeOfAddress 🧵

It's _really_ not a good look for an information security organization to run a web site that doesn't allow people to change the email addresses on their accounts, and I'm sorry to say that the Center for Internet Security's CSAT tool https://csat.cisecurity.org/ is guilty of this.
#ChangeOfAddress 🧵

On https://jabra.com/ there's no way I can find to change the email address associated with my account. I submitted a support ticket asking how to do it. We'll see what they say.
#ChangeOfAddress
🧵

I had to change my email address in like three different places at https://eversource.com/. Honestly, I'm not even sure I found all the places the old one was stashed. The Eversource web site is a maze of twisty little passages, with instructions on page A sending you to page B to make changes, and sometimes those links to page B don't work or go to the wrong place. It's gross.
#ChangeOfAddress 🧵

There is no way to delete your https://newyorker.com/ account yourself or change the email address. I searched and found https://www.reddit.com/r/privacy/comments/1elpnzd/how_to_for_privacy_data_removal_from_wired/, which claims you can email privacy_administration@condenast.com to demand that they delete the account, which I don't need anymore since I no longer subscribe to any Conde Nast magazines (their treatment of Erin Overbey saw to that!). We'll see how that goes.
#ChangeOfAddress
🧵