Credit Expert is a terrible website

zzzt

I am trying to use the website https://www.creditexpert.co.uk. This is the right URL, isn't it? I don't really understand why it needs to know mother's maiden name, but it seems like the real site.

The restrictions on the memorable word were ridiculous, it wouldn't accept anything I put so I had to basically make up a worthless, weak second password. The reminder for it was limited to the same length as the password, so I couldn't write anything worthwhile in it. Typical pseudo-security of a badly programmed website. It wouldn't surprise me if the passwords aren't even hashed, since they are limited in length (sure sign that they are storing the literal string in their database, I hope nobody used the same password on other sites!).

Why do big companies seem averse to spending money on qualified, experienced programmers? I mean, it's only the security of their customer's information at stake. It doesn't surprise me that Experian sold their customer's private information to identity fraudsters.

Eventually I finished the second page of the registration process, and then it loaded the first page again but with nothing filled in. I have received no emails and it says I don't have an account. So I'm guessing it silently failed without an error message?

It's sad that to check my credit rating I have to submit my personal details and credit card info to fraudsters who do not care at all about my security or privacy.

Tixy

Can't comment on the site security. Or that you think the company are fraudsters.

But if you didn't want to give them your card details etc again (if they didn't manage to store it last time) then you could always go for the old school option of going for a postal report and paying by cheque or postal order.

boo_star

zzzt wrote: »

I am trying to use the website https://www.creditexpert.co.uk. This is the right URL, isn't it? I don't really understand why it needs to know mother's maiden name, but it seems like the real site.

The restrictions on the memorable word were ridiculous, it wouldn't accept anything I put so I had to basically make up a worthless, weak second password. The reminder for it was limited to the same length as the password, so I couldn't write anything worthwhile in it. Typical pseudo-security of a badly programmed website. It wouldn't surprise me if the passwords aren't even hashed, since they are limited in length (sure sign that they are storing the literal string in their database, I hope nobody used the same password on other sites!).

Why do big companies seem averse to spending money on qualified, experienced programmers? I mean, it's only the security of their customer's information at stake. It doesn't surprise me that Experian sold their customer's private information to identity fraudsters.

Eventually I finished the second page of the registration process, and then it loaded the first page again but with nothing filled in. I have received no emails and it says I don't have an account. So I'm guessing it silently failed without an error message?

It's sad that to check my credit rating I have to submit my personal details and credit card info to fraudsters who do not care at all about my security or privacy.

The mothers maiden name would be for password recovery.

If the page looped back to the homepage after filling in the details then it's a simple website error.

We could argue all day over the "legitimacy" of CRAs but Experian are not fly-by-night fraudsters, they already have the information anyway.

mcpitman

zzzt wrote: »

It's sad that to check my credit rating I have to submit my personal details (point 1) and credit card (point 2) info to fraudsters who do not care at all about my security or privacy.

Point 1- And you expect them to identify you by......
Point 2 - They already have this data (or at least data about your card).

RE website security - go and work for them, based in Nottingham, always recruiting