My strongly worded email to AEM: Their website is over HTTP!
#1
Moderator
Thread Starter
My strongly worded email to AEM: Their website is over HTTP!
Mods, feel free to move this, but I want it to be known that if and when you log into the AEM website, currently, that your password is going across the Internet unencrypted and in plain text. Also, the PII you enter is also doing the same. Protect yourself, email AEM if you're a customer and tell them you want them to get with the program and protect their customers. This is not okay.
You can also message them here: http://aeminfinity.com/Contact/
The following 4 users liked this post by RedCelica:
#2
Mods, feel free to move this, but I want it to be known that if and when you log into the AEM website, currently, that your password is going across the Internet unencrypted and in plain text. Also, the PII you enter is also doing the same. Protect yourself, email AEM if you're a customer and tell them you want them to get with the program and protect their customers. This is not okay.
You can also message them here: AEM Electronics - AEM Infinity
Thanks for taking the effort to email them and also notifying the community.
#3
The excuse to not run SSL is long gone. They are free now.
The following users liked this post:
anorexicpoodle (06-11-2018)
#4
#7
I registered an account with safe racer a few years ago. My welcome email included my password in plain text! I immediately emailed them and advised them to purge any record of myself from their system to which they never responded. Thankfully I never entered a credit card or anything of the like into their site yet.
Trending Topics
#8
Moderator
Thread Starter
For now I'm doing a password reset each time I log out. This is dumb. Even dumber, httpS://www.aemelectronics.com is...well...encrypted. Maybe they'll be smart enough to add a SAN record to that cert when they have to renew it on Sept 11, and use the same cert for both sites.
Where the hell do I download my base tune from? I talked to my tuner, who said it was suppose to be on their site...not finding it.
Where the hell do I download my base tune from? I talked to my tuner, who said it was suppose to be on their site...not finding it.
#9
For now I'm doing a password reset each time I log out. This is dumb. Even dumber, httpS://www.aemelectronics.com is...well...encrypted. Maybe they'll be smart enough to add a SAN record to that cert when they have to renew it on Sept 11, and use the same cert for both sites.
Where the hell do I download my base tune from? I talked to my tuner, who said it was suppose to be on their site...not finding it.
Where the hell do I download my base tune from? I talked to my tuner, who said it was suppose to be on their site...not finding it.
The following users liked this post:
RedCelica (06-15-2018)
#10
Moderator
Thread Starter