5

A user has asked for assistance on a web-based multiple password-checking script for Tesco and Izotope websites. I can't think of any legitimate uses for this - even if the OP is intending to operate a "trusted third party" service, I should think users willingly divulging their credentials for these sites is a breach of standard T&Cs.

There's another Tesco one here from the same user, asking a related question. This one has attracted some answers, but no-one has asked what the OP is trying to do - or whether they should be doing it in the first place.

I appreciate that refusing to answer questions for ethical security reasons is not going to stop people trying. But users like this (who in this case, putting it politely, probably don't present much of a security risk) could be re-educated. And helpful helpers might also be encouraged to enquire about the end purpose. What does the community think?

8
  • Bah, I ask a question, and then notice this possible dup. Though, to be fair, that one's about mobile device jail-breaking, which has plenty of ethical uses. – halfer May 11 '13 at 19:54
  • 1
    Closing questions with suspicious requests is more general and closed as a dupe of the question you've found. Several of the answers there are also not specific to jailbreaking. I think that may be the canonical Meta post on this topic, but I'm going to poke around for another minute before voting. – jscs May 11 '13 at 20:04
  • 4
    reminds me of ismytwitterpasswordsecure.com – djechlin May 11 '13 at 20:07
  • Thanks @Josh. I've asked the OP for a use-case on the two questions I've pointed to, for his/her potential edification :). – halfer May 11 '13 at 20:08
  • 1
    Your own judgement is your best guide here, as it's a gray area like the other question you linked to, so it's tough to make a hardline decision about it. – jonsca May 11 '13 at 20:18
  • The possible dup suggests we shouldn't help with "software cacking" - I certainly don't like the sound of that, whatever it is! – halfer May 11 '13 at 20:22
  • It's possible that he may be developing it to grab his own account details etc, but it does look a bit iffy. Probably breaks Tesco T&Cs too. – nickhar May 11 '13 at 20:59
  • 1
    @nickhar The Izotope one is more blatant: when checking more then 20+ email:pass. – Danny Beckett May 12 '13 at 2:23

Browse other questions tagged .