Spiceworks in WTF-class social log-in SECURITY BLUNDER A serious security flaw has been discovered in the Spiceworks network administration application. The issue, uncovered by Spicehead Darren K Smith, allows anyone with a Facebook or LinkedIn account to log in as an administrator. Spiceworks has responded by temporarily disabling social sign-in until the flaw can be addressed. …
The quote I found was The company generates most of its revenue through the sale of ads displayed on its network.. Which suggests why they might allow you to sign in with Facebook or Twitter.
That said this might not be the best commercial basis for funding help desk and monitoring software.
This post has been deleted by its author
When someone is very successful in one industry, there is a tendancy by them to assume they'd be suitable for other industries as well. - witness the number of actors who launch a singing career or vice verca.
The same thing appears to have happened here: whilst I am definitely no fan of their music, it's of no doubt that their "girl power" themed pop songs were hugely successful, but in this case, they should have stuck with what they know best.
Why would an application provider do this?
I totaly do not believe the "user convenience" angle. Not with the likes of Facebook and LinkedIn anyway.
My next thought is there is some corporate-level motivation, in the same way as there is (presumably) some corporate level motivation for all these app installers that now want you to install "optional" addtional snoopware such as Chrome. Presumably $$$$$ are changing hands somewhere.
What gives?
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
