Cross-posted from: https://sh.itjust.works/post/19987854


We have previously highlighted the importance of not losing your account number, encouraging it to be written down in a password manager or similar safe location.

For the sake of convenience account numbers have been visible when users logged into our website. This had led to there being potential concerns where a malicious observer could:

  • Use up all of a user’s connections
  • Delete a user’s devices

From the 3rd June 2024 you will no longer be able to see your account number after logging into our website.


    • Todd Bonzalez@lemm.ee
      link
      fedilink
      arrow-up
      17
      ·
      1 month ago

      I think the issue is that someone could physically look at your screen and walk away with the account number, not that they might have remote access.

    • Creat
      link
      fedilink
      arrow-up
      15
      ·
      1 month ago

      Since the other comment didn’t Go into detail: Microsofts “Recall” will so that on every Windows 11 PC soon. Literally index everything you do or look at, OCR-ing periodic screenshots. Also storing them, possibly including sensitive information like this.