Notices by Jonathan Kamens (jik@federate.social), page 8

(https://linkedin.com/ dumpster fire adding AnonAddy address, continued)
Despite the fact that I got an error when I clicked the verification link, the address now shows up as verified on my addresses list—see the first screenshot below.
But when I click the "Make primary" link, I get the messed-up page shown in the second screenshot below, and my primary address is _not_ changed to the new address.
I think I'm just going to give up on this one. *sigh*
#ChangeOfAddress 🧵

More on Ko-Fi (https://federate.social/@jik/113152721624111083)...
A few hours after I emailed feedback@ko-fi.com about the problems I described previously, I got an email with a link from Zendesk asking me to "Create a password for Ko-fi.com Support Portal." I clicked the link and instead of being asked to create a password I was brought to the Ko-Fi login screen. I logged in and was brought to https://help.kofi.com/, which has a "Sign in" button. I clicked the button and it did nothing. #smdh
#ChangeOfAddress 🧵

I think it's a pretty good rule for life that if you consider @gretathunberg an enemy, you're the baddies.
Ref: https://www.middleeastmonitor.com/20240917-greta-thunbergs-anti-semite-smear-is-a-badge-of-honour-say-supporters/
#Gaza #Israel #apartheid

Can you imagine if a family during The Blitz in London had announced that they refused to live in fear so they weren't going to close their blackout curtains anymore?
They would have been ostracized and probably arrested.
This post is about #COVID.
#CovidIsNotOver #MaskUp

An interesting thing I've encountered while changing my email address everywhere is that a number of storefront sites have integrated Shopify since I first signed up.
As soon as I enter my old username and password for these sites, instead of authenticating me using that password, they immediately pop-up the Shopify authentication modal and send a code to my phone for me to use to log in.
That means I can't remove my old email address from these sites. *sigh*
#ChangeOfAddress 🧵

Speaking of embarrassing information security websites, https://app.dmarcanalyzer.com/ happily claims to accept my new anonaddy.me email address, and tells me it's going to send a verification email to that address, but it never does, so either the site is buggy or it's silently refusing to accept anonaddy.me addresses while pretending to accept them. 🤡
#ChangeOfAddress 🧵

The repeated logins and separate contact info stored for each nonprofit at https://classy.org/ seem weird at first, but after some thought they make sense.
The repeat logins are necessary because each org site is under the org's TLD, so each needs a separate login cookie.
The separate contact info makes sense because nonprofits don't want their data commingled with other nonprofits' data.
#ChangeOfAddress 🧵

The UX and security at https://costco.com/ for changing your email address is shit.
The dialog shown below pops up when I click the button to change my email address.
The "Email Address" field in this dialog is already filled in with my email address and it's not editable, so why are they telling me to enter something?
(continued)
#ChangeOfAddress 🧵

https://usa.experian.com/: I was able to edit my username separately from my email address. Good!
When I went to edit my username, it asked me for my password. Good!
But then it put up a warning saying my password was invalid. IT'S MY PASSWORD.
It accepted the "invalid" password despite the warning.
It took 23 minutes to send a change notification to my new address.
Ah, yes, credit reporting agencies, always at the forefront of security best practices. /s
#ChangeOfAddress 🧵

Over at https://ezdrivema.com, it's hard to find where you can update your email address. First you have to expand "Update Account"; ok, sure, that makes sense. Then you have to guess that 'Update Contacts/Address/Phone" is the next thing to click, even though it doesn't say that you can update your email address there. Then you have to click the "Edit" link under your entry in the contact list, even though, again, it doesn't show that your email address can be edited there.
#ChangeOfAddress 🧵

I hadn't logged into https://brother-usa.com/ for a long time, so I was prompted to change my password. This means I got to see the password rules for the site. Two different versions of them, in fact. My friends, if you need to tell people they can't use a question mark or exclamation point as the first character of their password, you're doing something wrong.
Aside from that, alas, I'm not allowed to change my email address here. 😠
#ChangeOfAddress 🧵

Over at PatientWallet.com, they got several things wrong. First, after I entered my new address and saved the change, it popped up a dialog asking me to enter my password to confirm, _and the password field was already filled in._ I do _not_ have any sort of autofill enabled in my password manager. I have no idea how or why this happened, but however it happened, it's really broken. (continued)
#ChangeOfAddress
🧵

More PatientWallet.com... After I changed my address, the site sent a single confirmation email to both my old and new addresses; the new address was in the To line and the old address was BCC'd. This is a bad idea for several reasons, the biggest one being that not including the recipient address in the To header increases the spam score of the message significantly, so it's more likely to end up in the user's spam folder. (continued)
#ChangeOfAddress
🧵

More PatientWallet.com... In addition to the address change notification, the site also sent a separate, entirely redundant and unnecessary "Your PatientWallet user details have been changed" message.
Also, both this and the email address change notification were sent _before_ the "Please verify your email address" message was even sent, let alone before I clicked the link in that message to confirm the change. (continued)
#ChangeOfAddress
🧵

At https://anveo.com/, there's no way as far as I can tell to change the email address associated with an account. I opened a support ticket to ask how to do it. We'll see what they say.
#ChangeOfAddress
🧵

More PatientWallet.com... When I clicked the link in the "Please verify your email address" message to confirm the new address, the site loaded, and there was a banner at the top telling me that I needed to confirm my address, _which I had just confirmed by clicking on the link which brought me to that page_.
This is some amateur hour stuff, seriously.
#ChangeOfAddress
🧵

https://app.cobalt.io/ shittiness:
* Cobalt's app does not support WebAuthn.
* When I go to edit my 2FA settings, for some inexplicable reason the app pops up a new window and makes me log in in that window, including username, password, and TOTP code, rather than just prompting me for my password or 2FA code in the main window to confirm my identity. This is security theater, not realy security. (continued)
#ChangeOfAddress
🧵

When I changed my email address at https://amctheatres.com/, it made me enter my street address before I could save the form with the change, whereas before this it was content with my having only entered my city, state, and ZIP. *sigh*
#ChangeOfAddress
🧵

When I tried to log into https://americangreetings.com/ to change my address there, it said my username or password was incorrect. When I tried to use the "Forgot password?" link to have them send me a password reset email, they said they were sending me an email but I never received it. I assume this means they deleted my account due to non-use at some point without notifying me. Not great.
#ChangeOfAddress
🧵

(APC email address change continued)
I tried again later when they were up. After clicking the button to change my address and submitting the new address, the following occurred:
* The site displayed a page telling me to enter the code they sent to the new address.
* I received an email with the Subject line "Log in with your new Salesforce username" (!!) listing weirdly constructed old and new usernames for me. There was nothing useful I could do with this email.
(continued)
#ChangeOfAddress 🧵