PN are listening and acting

In reply to:

---

http://usertools.plus.net/status/archive/1180028652.htm

In addition to the previous announcements we will also be allowing customers the opportunity to opt out of having their address books imported into SquirrelMail should they choose to.

---

A decision I

It should be the other way round IMO i.e. opt-in.

Tiny steps I

Maybe, but this is really poor. Why are they repeating the mistakes? Will they delete all old accounts not used/accessed for more than 90 days before importing the data? Why import more data than is needed only to potentially expose it to other vulnerabilities (known or unknown)? Maybe if they run a clean-up exercise to remove old accounts it wouldn't be too bad but they haven't said that they are dealing with that issue at all.

I have thought about this previously when they announced that all the addresses were to be imported into the new Webmail system but concluded, as all the email addresses were already compromised what further damage could be caused, regardless if their systems were breached for a second time.
Perhaps a somewhat cynical view, but

True, but an opt-in option would make much more sense in terms of cleaning out contacts which should not really be needed.

But I guess they're going for the easiest option to implement and a direct response to the large number of tickets they've received from people regarding their desire to get their addressbooks back.

Ideally an 'import @mail addressbook' tool should be available. Along with full import/export of addressbooks in vCard and CSV formats for SquirrelMail.

Edited by h0tblack (Thu 24-May-07 20:02:03)