About me
Bookshop

Get new posts by email.

About me

Shocking web security fail by Theatre Royal Newcastle

Theatre Royal, Newcastle upon Tyne

Theatre Royal, Newcastle upon Tyne

The Theatre Royal in Newcastle (the Northern Home of the Royal Shakespeare Company) has a new website today, developed by Firechaser.

I don’t know about chasing a fire, but they may need to extinguish a virtual one soon.

The Theatre has emailed me to say that my details have been moved over to the new site, and I should login with my email address and the temporary password of “theatreroyal”.

Yes, logging in with my email address and that pisspoor non-unique standardised password will give you access to all of my personal data – including my phone number, address, and theatrical interests – plus the opportunity to change my password and lock me out of my own account. Or at least it would, if I hadn’t changed my password.

That is a clear and obvious breach of the Data Protection Act’s security requirements – plus, it’s frankly astounding that anyone thought it would be okay. Let’s hope they wise-up soon.

Photo by Stephen Douglas, used under licence

This post was filed under: Technology, , , .

Recently published posts

‘The Reluctant Traveler’ / 19 April 2024

Circled / 18 April 2024

‘Fallen leaves’ / 17 April 2024

A manifestly different outcome / 16 April 2024

Forgotten promises / 15 April 2024

Souter Lighthouse / 14 April 2024




Random posts from the archive




Comments and responses

Trackback from elsewhere on the site



21:48
17th March 2010.

This post has been referenced by another on this site:
sjhoward.co.uk » Quick work . . . Theatre Royal website fixed!




Compose a new comment

I'm not taking comments on my blog any more, so I'm afraid the opportunity to add to this discussion has passed.




The content of this site is copyright protected by a Creative Commons License, with some rights reserved. All trademarks, images and logos remain the property of their respective owners. The accuracy of information on this site is in no way guaranteed. Opinions expressed are solely those of the author. No responsibility can be accepted for any loss or damage caused by reliance on the information provided by this site. Information about cookies and the handling of emails submitted for the 'new posts by email' service can be found in the privacy policy. This site uses affiliate links: if you buy something via a link on this site, I might get a small percentage in commission. Here's hoping.