Hacker News Reader

I am genuinely impressed at the lack of tech literacy in the live feed about this from the beeb.

Yeah, I noticed they were recommending that users log in and reset their password - at a time when ASOS still hadn't said anything about the extent of the problem.

For all they knew, the attackers could have been able to subvert the reset process to collect plaintext passwords, so the Beeb's advice risked turning a disaster for ASOS into a catastrophe for their users.

I'm not sure who is recommending that, but if it is in the general channel it could be the proverbial bad guys making that recommendation in order to grab more account credentials.

Reply on news.ycombinator.com