Membership renewal email security flaw

[johnnyk_6]

#544740

This isn’t really an issue if your email is secure. I agree though, they should have some kind of login or verification. Set up 2-factor authentication for your email account if you want to be extra safe.

[Bill Pemberton]

#544744

………I usually just call in my membership as the young lady who assists the VOA is quite pleasant and helpful. That will take away any concern if folks are questioning the security of their system at work or home.

[Shannon Whitehead]

#544759

You’ve spoken and we’ve listened! We have disabled the direct login to the portal for renewals so now you will need to log in the way you normally do to renew your membership!

p.s. exciting news just went out this morning about tires! VOA has done it again for our members!!!! Posting in the proper forum in just a sec

[Shannon Whitehead]

#36477

Has anyone else noticed that the link in the renewal email automatically logs you in and does not require identity validation. I tested it and if you forward it to another email address they can access your portal and all you personal information, to include your car VIN, address, phone number, email, and any family members names you have listed. So if someone hacks into your email, which is not hard to do at all, then they have all your personal information and family members (scariest part). I’ve tried to bring this up multiple times via Driveviper.com feedback channels and have not heard a single response.

[Author]

Posts