
Why should users be forced to correct and resubmit a form because they didn't properly format an otherwise valid phone number?
We have the technology. I can think of no good reason for a company with net profits of over a billion dollars per month to not create software that doesn't force users into entering contact phone numbers in the format required by a back-end software system.
And why did they ask me for my phone number? They have my phone number. I've been a customer for over 20 years. They should know how to contact me.
when software discombobulates
20111101
Entered by: Ben Simo
Incorrect Format
20100115
Entered by: Ben Simo
That was the wrong password
I got the above screen after failing to login to my Meetup account to RSVP for a meeting.
As a user, I like that it tells me that I used the correct email address but wrong password.
However, this system has just verified information without authentication. It tells me that a valid user email address was used. This information could be helpful to someone trying to gain unauthorized access.
Now, in this case, I don't think disclosing that email accounts exist is a huge deal. This is a social networking site. This is not a banking system. This is not a medical records system. It is not an interface to access private information. Meetup profiles are public and searchable on the web -- although not email addresses. I say no problem in the context of this site.
For other systems, giving non-authenticated people information that narrows down access credential options could be a huge security problem.
20090228
Entered by: Ben Simo
2 Comment
Comment


