Click Here!
Page 1 of 2 1 2 LastLast
Results 1 to 10 of 12
Like Tree15Likes

Thread: Season Ticket Holders - The Kings Are Compromising Your Account Information

  1. #1
    1st Scoring Line RoyalSubject's Avatar




    Join Date
    May 2012
    Posts
    1,666
    Liked
    4071 times
    Karma
    17562760
    Mentioned
    3 Post(s)
    Tagged
    0 Thread(s)
    Quoted
    192 Post(s)

    Default Season Ticket Holders - The Kings Are Compromising Your Account Information

    I received an email today from my rep regarding my payment plan for the upcoming year. Included in this email were my Account Id and Password. I expressed concern about this to my ticket rep, and his response was that my information was totally safe, that I had nothing to worry about, and that they will continue emailing passwords several times a year. I'm sure most people would buy this explanation, but he didn't know that I write web applications for a living and know better.

    Emailing passwords is considered an extremely insecure practice. Any developer worth his or her salt, knows better than to do this. This is the reason most websites send you a password reset link in an email when you use the "Forgot my password" feature instead of sending your actual password.

    For those not technically inclined, an explanation of why this is insecure might be in order. Email is sent over the internet in plain text. This means that the text you read on the screen is exactly what gets sent from the originating server all the way to your inbox without any sort of encryption. If someone were to surreptitiously snoop on those servers, they would be able to read your email. In the case of the emails the Kings send out, anyone who snooped them would be able to see your account id and password, log in to your account, and steal all of the personal information you have listed in your profile. They could even change the email addressed linked to your account, and steal your account itself.

    Ignorance of best security practice is one thing, but disregarding legitimate concerns about the security of the personal information we entrust to the Kings is something I find unacceptable.

    I encourage anyone who values the privacy of their account information to email their rep and let them know that you find their practice of emailing passwords to be an unacceptable breech of the trust we explicitly grant them when we give them our information. If enough of us speak up, they just might update their systems and policies to take the security of our information more seriously.

  2. #2
    <3 Tanner <3 TooCool's Avatar




    Join Date
    Nov 2005
    Posts
    15,178
    Liked
    8525 times
    Karma
    2147483647
    Mentioned
    40 Post(s)
    Tagged
    1 Thread(s)
    Quoted
    855 Post(s)

    Default

    Did you just receive this email today? I checked my account and don't have anything from the Kings. The last time they sent me an email it was for Select a Seat, and it just had a unique one time only password.

    For the record, I have never gotten an email from them that has my password included. But I'll keep my eyes open and hope this doesn't happen to us as well.
    RoyalSubject and DorsalPhin like this.
    Facebook: facebook.com/grtoocool Twitter: @LGKTooCool

    While it seems like most of you are allergic to the "like" button, I just want to personally say thanks for looking anyway.

    Rink Dawg

  3. #3
    1st Scoring Line RoyalSubject's Avatar




    Join Date
    May 2012
    Posts
    1,666
    Liked
    4071 times
    Karma
    17562760
    Mentioned
    3 Post(s)
    Tagged
    0 Thread(s)
    Quoted
    192 Post(s)

    Default

    Yes, just today. My rep tried to call me a few times. When I didn't answer, he emailed the payment information to me.

    This is what he said about emailing passwords again.

    We will be sending passwords throughout the year in regards to presales for the Outdoor Game, Playoffs, Frozen Fury, as well as Select-A-Seat next summer.
    The password that was emailed to me was not a temporary password. It was the one I chose when I created my account. Obviously, I've changed it since I got that email, but I don't want to have to change my password every time the Kings decide to compromise my account.
    Last edited by RoyalSubject; July 31st, 2013 at 11:39 AM.
    mugs likes this.

  4. #4
    Official LGK Flirt DorsalPhin's Avatar




    Join Date
    Jun 2012
    Posts
    1,526
    Liked
    5159 times
    Karma
    600254176
    Mentioned
    24 Post(s)
    Tagged
    1 Thread(s)
    Quoted
    492 Post(s)

    Default

    I'm with TooCool...I have NEVER received an email from them that included the original password I chose when I signed up as a STH. Every password I have ever received from them was a special one-time use password that was unique to me.

    I will keep my eyes peeled though and if I happen to get any emails with my password in it, I will definitely alert my season ticket rep to it.

    The only issue I had with my personal information not being protected happened last year when an ex-friend of mine tried to get into Staples Center with my original issued season tickets (the hard copies) and was denied entrance because I had forwarded the tickets to someone else. He then went to the ticket booth at Staples and because he had my account number (printed on the season tickets) the ticket rep gave him ALL my personal information (address, phone number, credit card info, etc) including the fact that my 4 tickets had all been scanned for the game that day. He ended up waiting outside Staples Center and security had to get involved and all this crap but yeah, my ticket rep got a HUGE tongue lashing from me the next day. They have since improved their practices so that ticket box reps cannot give out any information to anyone about the account unless they have verified who they are talking to with a photo ID.
    RoyalSubject likes this.

  5. #5
    1st Scoring Line RoyalSubject's Avatar




    Join Date
    May 2012
    Posts
    1,666
    Liked
    4071 times
    Karma
    17562760
    Mentioned
    3 Post(s)
    Tagged
    0 Thread(s)
    Quoted
    192 Post(s)

    Default

    Maybe it was just something my rep chose to do. Either way, he and I talked on the phone a few minutes ago and he assured me that my main password would never be emailed again. As long as that never happens again, all is good in my book.
    TooCool and mugs like this.

  6. #6
    1st Scoring Line ucsdguy1's Avatar




    Join Date
    Feb 2008
    Posts
    2,544
    Liked
    1532 times
    Karma
    1106210
    Mentioned
    1 Post(s)
    Tagged
    0 Thread(s)
    Quoted
    163 Post(s)

    Default

    Quote Originally Posted by TooCool View Post
    Did you just receive this email today? I checked my account and don't have anything from the Kings. The last time they sent me an email it was for Select a Seat, and it just had a unique one time only password.

    For the record, I have never gotten an email from them that has my password included. But I'll keep my eyes open and hope this doesn't happen to us as well.
    Not sure if this relates - but I realized this past season I wasn't getting season ticket holder update e-mails after seeing many posts about gifts, deadlines, etc on these boards. I contacted my rep, who informed me IT had put me on a "I do not want to receive e-mails" list. I have no idea how that happened or why, but she had to go to IT to get me back on the list. Seem to be back on track now.

  7. #7
    Team LGK




    Join Date
    Nov 2007
    Posts
    1,455
    Liked
    1146 times
    Karma
    1238325
    Mentioned
    1 Post(s)
    Tagged
    0 Thread(s)
    Quoted
    146 Post(s)

    Default

    Quote Originally Posted by ucsdguy1 View Post
    Not sure if this relates - but I realized this past season I wasn't getting season ticket holder update e-mails after seeing many posts about gifts, deadlines, etc on these boards. I contacted my rep, who informed me IT had put me on a "I do not want to receive e-mails" list. I have no idea how that happened or why, but she had to go to IT to get me back on the list. Seem to be back on track now.
    It seems like both the Kings and the Galaxy either have or used to have a very low tolerance for bounced e-mail, and they'd remove you from the list straight away. I've also had to deal with this several times, though, like you, things seem to be back on track now.
    ucsdguy1 likes this.

  8. #8
    Win it again..for Tanner! nosoupforyou's Avatar




    Join Date
    Jan 2008
    Posts
    8,662
    Liked
    1285 times
    Karma
    2147483647
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Quoted
    173 Post(s)

    Default

    I've also never received an email with my account password on it, fortunately.
    RoyalSubject likes this.
    Be the Match! www.bethematch.org

    2011 - 2012, we believed, they delivered!
    2012 - 2013, be the best 7th man in the league! and do it again for Tanner!
    http://www.facebook.com/#!/group.php?gid=100755849966783

  9. #9
    1st Scoring Line RoyalSubject's Avatar




    Join Date
    May 2012
    Posts
    1,666
    Liked
    4071 times
    Karma
    17562760
    Mentioned
    3 Post(s)
    Tagged
    0 Thread(s)
    Quoted
    192 Post(s)

    Default

    Ugh, my ticket rep saga continues. This time my rep charged my debit card for my season tickets despite me telling him not to and giving him a different credit card number to charge instead. Of course it hit my account the day before my paycheck was deposited. I only keep enough money in there to cover bills and daily expenses, so the day before payday it usually has a low balance. Thankfully, I had the money in savings, so overdraft protection to kicked in. Not a huge deal, I guess, but I'm starting to think I was better off buying single tickets.

  10. #10
    1st Scoring Line ucsdguy1's Avatar




    Join Date
    Feb 2008
    Posts
    2,544
    Liked
    1532 times
    Karma
    1106210
    Mentioned
    1 Post(s)
    Tagged
    0 Thread(s)
    Quoted
    163 Post(s)

    Default

    Quote Originally Posted by LetTigerIn View Post
    It seems like both the Kings and the Galaxy either have or used to have a very low tolerance for bounced e-mail, and they'd remove you from the list straight away. I've also had to deal with this several times, though, like you, things seem to be back on track now.
    Yeah I had the same problem with my Galaxy tickets too! Although that one got fixed right away. The Kings took a bit longer
    LetTigerIn likes this.

Page 1 of 2 1 2 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28