Snyders new site security concern

[alexiskai]

Hi folks,

If you have an account at Snyder's, you probably got an email on Weds. announcing that they were re-launching their website and giving all users the same temporary password. This is not great security practice as it is, but the real problem is that as of right now the function to change your password on the new site does not work. Thus everyone is stuck with the same password, and anyone who knew the email address you used to register could potentially log in and view your account, order history, mailing address, etc.

If this bothers you (maybe it doesn't!), you can give them a call, speak to Jeff, and ask him to set your new password manually. I'm sure they'll have the reset function working soon, but I just wanted to alert folks in case anyone has privacy concerns.

[Dick Steinkamp]

Originally Posted by alexiskai

Hi folks,

Thus everyone is stuck with the same password, and anyone who knew the email address you used to register could potentially log in and view your account, order history, mailing address, etc.
.

...and any credit card info on file.

There may be more to this story, but it does not sound good to me. Lots of bad guys have our email addy's. It's just that most are screened out by our email provider's software and don't ever even hit our spam folder.

I would have thought they would have had a more elegant way of transitioning existing customers to the new site BEFORE they turned it on. What difference would a couple of weeks have meant in order to do it right?

[1931 flamingo]

iF i REMEMBER CORRECTLY DOES IT NOT SAY LOG IN USING THE PASSWORD THEY PROVIDE, THEN REGISTER AND THEY SEND AN EMAIL GIVING YOU ACCESS.
sNYDER'S BEEN AROUND TOO LONG TO MAKE A MISTAKE LIKE YOU'RE SUGGESTING.
rE-READ THEIR E-MAIL. jmo
pAUL IN ct

[alexiskai]

Thanks for your concern, I've spoken to their tech guy multiple times and I'm pretty certain of my facts. As I said, I expect them to fix the problem soon, but as of this writing the site does not reflect what they describe in the email and does not provide any password-setting mechanism for existing accounts.

[Mike V. Florida]

Originally Posted by alexiskai

Thanks for your concern, I've spoken to their tech guy multiple times and I'm pretty certain of my facts. As I said, I expect them to fix the problem soon, but as of this writing the site does not reflect what they describe in the email and does not provide any password-setting mechanism for existing accounts.

It does now.

[dbaldwi3]

Sponsored Links (Register now to hide all advertisements)

I sent them an email yesterday concerning this issue of not being able to change my password and i received a response today repeating what the original email said. i tried again today with no success. thinking maybe it was because i was on a mobil device i tried again on my pc with no luck either. It appears the link to change your password is missing. i truly hope they get this fixed soon as i've already had my charge card compromised twice by unsavory types!

[Bob C]

dbaldwi3 I did it about 4PM your time and it worked for me.


Bob

[jax55]

Has not worked for me yet, and I just tried again.
It got me to the new temporary password, but when I tried to change it on the site it kept coming back with a "general error" screen. No password update.
I have tried it several times today, and as long as I use the [password they gave, I can ge in... but still cannot change to a new one.
I emailed them today, no reply as yet.
I wonder if there are a lot if people trying to do this at the same time.. overloading the site and on chance when it calms down, someone can get it to work?

[dbaldwi3]

just tried again using a different web browser same results

[Bob C]

Strange, I just looked and it's not there now. I clicked on log in/register and in
the upper left corner is said change password. You put snyders in the top box
and your new password in the next two boxes.


Bob

[Bill G]

My experience was the same, but I called them and talked to their person Jeff who said the change your password button was taken off the page because they had a problem with it and it was supposed to be resolved in short order. In the meantime, he offered to me that I could either keep the snyders password until the button was back or he could put a different password in for me. I chose to have him put in a temporary password of my choice and then when the dust settles, I will go in and re-do it again.


Jeff was very pleasant to deal with and very apologetic over the issue.

[The Master Cylinder]

Originally Posted by Dick Steinkamp

...and any credit card info on file.

I don't think Snyder's stores your Credit Card info. You have to give it everytime you order, unlike some sites.

But still, it does make you worry a little...

[Garagekulture13]

I was able to change my password yesterday a little after 11am with no issue.

Sent from my SM-N950U using Tapatalk

[dbaldwi3]

Go to website [url]https://snydersantiqueauto.com then login using your email and Snyder’s password then type /changePassword in address bar after .com and press enter this will take you to the change password page where you can enter the info this worked for me this morning!!

[Afordman31]

Their password change is working!

[holdover]

Strange, I have been a customer for a couple of years and have ordered over 10K $ in parts, I did not get an email, and can't sign in

[TMB]

Follow dbaldwi3 advice. Allows you to get around the glitch some are having.

[JT1930]

Even if someone can see your orders or your mailing address does it really matter!? I mean people on here post their address and personal phone numbers. Not to mention send checks by mail to someone selling a part not knowing the other person from a hole in the wall. There’s a lot of stand up people in this forum but it only takes one scammer to get your money and no part for your self. Basically are you really worried about someone seeing your orders and address vs what goes on here and not using paypal that is a secure way of buying parts.

[PalAl]

Originally Posted by alexiskai

Hi folks,

If you have an account at Snyder's, you probably got an email on Weds. announcing that they were re-launching their website and giving all users the same temporary password. This is not great security practice as it is, but the real problem is that as of right now the function to change your password on the new site does not work. Thus everyone is stuck with the same password, and anyone who knew the email address you used to register could potentially log in and view your account, order history, mailing address, etc.

If this bothers you (maybe it doesn't!), you can give them a call, speak to Jeff, and ask him to set your new password manually. I'm sure they'll have the reset function working soon, but I just wanted to alert folks in case anyone has privacy concerns.

I changed mine a couple of days ago without a hitch, just checked it again and it works fine. I followed their instructions and the change over went smooth. Perhaps the problem is on your end....?

[updraught]

Originally Posted by JT1930

Even if someone can see your orders or your mailing address does it really matter!? I mean people on here post their address and personal phone numbers. Not to mention send checks by mail to someone selling a part not knowing the other person from a hole in the wall. There’s a lot of stand up people in this forum but it only takes one scammer to get your money and no part for your self. Basically are you really worried about someone seeing your orders and address vs what goes on here and not using paypal that is a secure way of buying parts.

Identity theft is a real problem in this world, unfortunately.

Every piece of paper with our address on it goes in the compost for the worms to digest, so it never leaves our property.

I hope they work out who has and who hasn't changed their password soon and sets those with a known password to some difficult to guess jibberish so the account is locked.

PS. I don't have an account.