The Ford Barn

The Ford Barn (https://www.fordbarn.com/forum/index.php)
-   Model A (1928-31) (https://www.fordbarn.com/forum/forumdisplay.php?f=3)
-   -   Snyders new site security concern (https://www.fordbarn.com/forum/showthread.php?t=260739)

alexiskai 03-22-2019 09:28 AM

Snyders new site security concern
 

Hi folks,

If you have an account at Snyder's, you probably got an email on Weds. announcing that they were re-launching their website and giving all users the same temporary password. This is not great security practice as it is, but the real problem is that as of right now the function to change your password on the new site does not work. Thus everyone is stuck with the same password, and anyone who knew the email address you used to register could potentially log in and view your account, order history, mailing address, etc.

If this bothers you (maybe it doesn't!), you can give them a call, speak to Jeff, and ask him to set your new password manually. I'm sure they'll have the reset function working soon, but I just wanted to alert folks in case anyone has privacy concerns.

Dick Steinkamp 03-22-2019 10:18 AM

Re: Snyders new site security concern
 

Quote:

Originally Posted by alexiskai (Post 1738941)
Hi folks,

Thus everyone is stuck with the same password, and anyone who knew the email address you used to register could potentially log in and view your account, order history, mailing address, etc.
.

...and any credit card info on file.

There may be more to this story, but it does not sound good to me. Lots of bad guys have our email addy's. It's just that most are screened out by our email provider's software and don't ever even hit our spam folder.

I would have thought they would have had a more elegant way of transitioning existing customers to the new site BEFORE they turned it on. What difference would a couple of weeks have meant in order to do it right?

1931 flamingo 03-22-2019 12:52 PM

Re: Snyders new site security concern
 

iF i REMEMBER CORRECTLY DOES IT NOT SAY LOG IN USING THE PASSWORD THEY PROVIDE, THEN REGISTER AND THEY SEND AN EMAIL GIVING YOU ACCESS.
sNYDER'S BEEN AROUND TOO LONG TO MAKE A MISTAKE LIKE YOU'RE SUGGESTING.
rE-READ THEIR E-MAIL. jmo
pAUL IN ct

alexiskai 03-22-2019 01:47 PM

Re: Snyders new site security concern
 

Thanks for your concern, I've spoken to their tech guy multiple times and I'm pretty certain of my facts. As I said, I expect them to fix the problem soon, but as of this writing the site does not reflect what they describe in the email and does not provide any password-setting mechanism for existing accounts.

Mike V. Florida 03-22-2019 02:33 PM

Re: Snyders new site security concern
 

Quote:

Originally Posted by alexiskai (Post 1739055)
Thanks for your concern, I've spoken to their tech guy multiple times and I'm pretty certain of my facts. As I said, I expect them to fix the problem soon, but as of this writing the site does not reflect what they describe in the email and does not provide any password-setting mechanism for existing accounts.

It does now.

dbaldwi3 03-22-2019 05:16 PM

Re: Snyders new site security concern
 

I sent them an email yesterday concerning this issue of not being able to change my password and i received a response today repeating what the original email said. i tried again today with no success. thinking maybe it was because i was on a mobil device i tried again on my pc with no luck either. It appears the link to change your password is missing. i truly hope they get this fixed soon as i've already had my charge card compromised twice by unsavory types!

Bob C 03-22-2019 05:24 PM

Re: Snyders new site security concern
 

dbaldwi3 I did it about 4PM your time and it worked for me.


Bob

jax55 03-22-2019 05:50 PM

Re: Snyders new site security concern
 

Has not worked for me yet, and I just tried again.
It got me to the new temporary password, but when I tried to change it on the site it kept coming back with a "general error" screen. No password update.
I have tried it several times today, and as long as I use the [password they gave, I can ge in... but still cannot change to a new one.
I emailed them today, no reply as yet.
I wonder if there are a lot if people trying to do this at the same time.. overloading the site and on chance when it calms down, someone can get it to work?

dbaldwi3 03-22-2019 06:29 PM

Re: Snyders new site security concern
 

just tried again using a different web browser same results :(

Bob C 03-22-2019 07:12 PM

Re: Snyders new site security concern
 

Strange, I just looked and it's not there now. I clicked on log in/register and in
the upper left corner is said change password. You put snyders in the top box
and your new password in the next two boxes.


Bob

Bill G 03-22-2019 07:22 PM

Re: Snyders new site security concern
 

My experience was the same, but I called them and talked to their person Jeff who said the change your password button was taken off the page because they had a problem with it and it was supposed to be resolved in short order. In the meantime, he offered to me that I could either keep the snyders password until the button was back or he could put a different password in for me. I chose to have him put in a temporary password of my choice and then when the dust settles, I will go in and re-do it again.


Jeff was very pleasant to deal with and very apologetic over the issue.

The Master Cylinder 03-22-2019 08:07 PM

Re: Snyders new site security concern
 

Quote:

Originally Posted by Dick Steinkamp (Post 1738966)
...and any credit card info on file.

I don't think Snyder's stores your Credit Card info. You have to give it everytime you order, unlike some sites.

But still, it does make you worry a little...:rolleyes:

Garagekulture13 03-23-2019 04:43 AM

Re: Snyders new site security concern
 

I was able to change my password yesterday a little after 11am with no issue.

Sent from my SM-N950U using Tapatalk

dbaldwi3 03-23-2019 06:53 AM

Re: Snyders new site security concern
 

Go to website [url]https://snydersantiqueauto.com then login using your email and Snyder’s password then type /changePassword in address bar after .com and press enter this will take you to the change password page where you can enter the info this worked for me this morning!!

Afordman31 03-23-2019 08:44 AM

Re: Snyders new site security concern
 

Their password change is working!

holdover 03-23-2019 08:33 PM

Re: Snyders new site security concern
 

Strange, I have been a customer for a couple of years and have ordered over 10K $ in parts, I did not get an email, and can't sign in

TMB 03-24-2019 06:49 AM

Re: Snyders new site security concern
 

Follow dbaldwi3 advice. Allows you to get around the glitch some are having.

JT1930 03-28-2019 09:35 PM

Re: Snyders new site security concern
 

Even if someone can see your orders or your mailing address does it really matter!? I mean people on here post their address and personal phone numbers. Not to mention send checks by mail to someone selling a part not knowing the other person from a hole in the wall. There’s a lot of stand up people in this forum but it only takes one scammer to get your money and no part for your self. Basically are you really worried about someone seeing your orders and address vs what goes on here and not using paypal that is a secure way of buying parts.

PalAl 03-28-2019 10:19 PM

Re: Snyders new site security concern
 

Quote:

Originally Posted by alexiskai (Post 1738941)
Hi folks,

If you have an account at Snyder's, you probably got an email on Weds. announcing that they were re-launching their website and giving all users the same temporary password. This is not great security practice as it is, but the real problem is that as of right now the function to change your password on the new site does not work. Thus everyone is stuck with the same password, and anyone who knew the email address you used to register could potentially log in and view your account, order history, mailing address, etc.

If this bothers you (maybe it doesn't!), you can give them a call, speak to Jeff, and ask him to set your new password manually. I'm sure they'll have the reset function working soon, but I just wanted to alert folks in case anyone has privacy concerns.

I changed mine a couple of days ago without a hitch, just checked it again and it works fine. I followed their instructions and the change over went smooth. Perhaps the problem is on your end....?

updraught 03-29-2019 05:37 AM

Re: Snyders new site security concern
 

Quote:

Originally Posted by JT1930 (Post 1741253)
Even if someone can see your orders or your mailing address does it really matter!? I mean people on here post their address and personal phone numbers. Not to mention send checks by mail to someone selling a part not knowing the other person from a hole in the wall. There’s a lot of stand up people in this forum but it only takes one scammer to get your money and no part for your self. Basically are you really worried about someone seeing your orders and address vs what goes on here and not using paypal that is a secure way of buying parts.

Identity theft is a real problem in this world, unfortunately.

Every piece of paper with our address on it goes in the compost for the worms to digest, so it never leaves our property.

I hope they work out who has and who hasn't changed their password soon and sets those with a known password to some difficult to guess jibberish so the account is locked.

PS. I don't have an account.


All times are GMT -5. The time now is 05:57 PM.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2025, vBulletin Solutions Inc.