Hacker News new | comments | show | ask | jobs | submit login

I was quite surprised to find that the NHS uses password-less logins for its "Flexible Worker Portal":

https://erecruitment.nhsponline.nhs.uk/Portal/LoginForm.aspx

So all you need is the DoB, email address and postcode of someone, and you can view their private information. Genius.




Guidelines | FAQ | Support | API | Security | Lists | Bookmarklet | DMCA | Apply to YC | Contact

Search: