Security, or breach of security?

[Czarcasm]

According to this site, over 15, 000 people were able to sneak into the NY Comic Con last year through various means, including badge swapping. This year, they embedded a chip that had to be activated through the Con website through your Twitter account…which also allowed the convention to advertise through your Twitter account without your knowledge, making it look as if the message came from you… More here. I don’t think that this is a good idea, and I would hate for this practice to spread to other venues. What say you?

[MrDibble]

The ComicCon response indicates it was an opt-in service - was this just people not reading the TOS? If so, it’s just a bad idea on ComicCon’s part (I mean, hijacking Harry Knowles’ twitterfeed? That’s not going to go down well in AICN-land, I’m sure) but it can be countered in future by people watching what they click. If not, it probably crosses over into way bad idea. And yes, I’d hate it if this happened at a con I attended (not that we have anything like that size of con here, damnit!)

[Czarcasm]

The "opt-in part was for the fans to tie in to the con, not for the con to take over their Twitter accounts. From contactmusic.com:

NYCC did not ask for explicit permission from the users to post on Twitter on their behalf. However, after the start of the convention, plenty of attendees with connected twitter accounts were startled to discover statuses that they had not written. The tweets looked incongruous enough, ranging from “I <3 NYCC” to “So much to see, so much to do! NYCC2013, I love you!” The added bit.ly links redirected to New York Comic Con’s Facebook page, and the tweets were all tagged with #NYCC. One Twitter user was outraged due to the poor quality of the tweets, writing: "@NY_Comic_Con Wrote 3 fake tweets on my account. And they weren’t funny, disgusting, or my me so I’m mad. "

[Senegoid]

@Czarcasm

…which also allowed the convention to advertise through your Twitter account without your knowledge, making it look as if the message came from you… More here. I don’t think that this is a good idea, and I would hate for this practice to spread to other venues. What say you?

LinkedIn is accused of doing this, or something similar. They badger users to give their e-mail addresses and passwords :eek: then harvest all your contacts from your e-mail account. Then send invitations in your name to all your contacts, to come and join LinkedIn. (I myself have received some of these.)

HuffPo article: LinkedIn Sued For ‘Hacking’ Users’ Email Accounts To Spam Friends

Bloomberg article: LinkedIn Customers Allege Company Hacked E-Mail Addresses

The Independent article: Stranger danger? LinkedIn denies ‘hack and spam’ attacks on members in marketing tussle

[Boyo_Jim]

@Senegoid

LinkedIn is accused of doing this, or something similar. They badger users to give their e-mail addresses and passwords :eek: then harvest all your contacts from your e-mail account. Then send invitations in your name to all your contacts, to come and join LinkedIn. (I myself have received some of these.)

HuffPo article: LinkedIn Sued For ‘Hacking’ Users’ Email Accounts To Spam Friends

Bloomberg article: LinkedIn Customers Allege Company Hacked E-Mail Addresses

The Independent article: Stranger danger? LinkedIn denies ‘hack and spam’ attacks on members in marketing tussle

This happened right here to one of the mods. and numbers of us got invites in the mod’s name. I’m still pretty pissed, because the mods wouldn’t take any action to prevent a recurrence, so it could happen again.