Comments on: Please Go Away Plaxo!

By: bdusablon

bdusablon — Mon, 16 Feb 2009 19:16:33 +0000

In related news, I recently received more "would like to connect with you" requests from Plaxo. Not good.

By: Redgee Capili

Redgee Capili — Wed, 20 Aug 2008 21:09:35 +0000

Thanks. And certainly we were transparent to that mistake. We goofed – albeit that it was a minor leak. It was still a leak nonetheless.

But the point I’d like to make to your readers is that your address book information, password, etc – were never in danger.

The leak was due to a bad URL to blogs found in the weekly reminder emails sent to members. If the member clicked on that link, their email address was appended at the end of the url (in itself is not a problem). But the server hosting that blog would now have your email address in their server logs. (sigh). Again, no excuses.

Thanks again Brian.

Redgee

By: Brian

Brian — Wed, 20 Aug 2008 20:58:16 +0000

Redgee – I appreciate you’re quick response to this – I’ll contact you directly and hopefully get this resolved.

In reference to your first response – regardless of whether it was patched quickly or not, or whether someone was already connected to me, revealing email addresses is just too big a mistake to make me feel good about my contacts and data being housed securely with Plaxo, at least for now…

By: Redgee Capili

Redgee Capili — Wed, 20 Aug 2008 20:45:25 +0000

Hmmm, actually – looking at this image a bit more, it’s a connection request – not an Invite. I wonder if you have another account?? Can you contact me directly so we can find out what’s up and delete it (if that’s the case). Thanks.

By: Redgee Capili

Redgee Capili — Wed, 20 Aug 2008 20:20:01 +0000

Did you opt out or just deleted your account? If you just deleted your account, others can still invite you to join (again). But if you opt out, you won’t get further emails from Plaxo.

ps: When you say “revealing email addresses”, the only issue which comes to mind was the passing of email addresses (of people you’re already connected to) embedded in links to your server logs (to which only you had access) when those same folks visited your site. That was patched immediately.