DVC Member Website issue

[nickys]

A story that is now widely available is that the introduction of 2 factor authentication on the DVC Member website has also managed to screw up the password verification.

Their technical team are aware and told me they are working to fix this as soon as possible. The CM also admitted the flaw was directly caused by the implementation of 2FA. You just can’t make this up.

One site that has the story is here:

Disney Vacation Club Website Not Validating User Passwords | DVCNews.com - The essential Disney Vacation Club resource!

At the moment, two-factor authentication codes are the only thing keeping Disney Vacation Club member accounts secure. On November 16, Disney Vacation Club introduced two-factor authentication to

dvcnews.com

(And yes, I tested this out earlier before calling them).

 

[RememberWhen]

Disney at it’s best

My mom didn’t believe it, so I tried it and it definitely works. SMH

 

[correcaminos]

A story that is now widely available is that the introduction of 2 factor authentication on the DVC Member website has also managed to screw up the password verification.

Their technical team are aware and told me they are working to fix this as soon as possible. The CM also admitted the flaw was directly caused by the implementation of 2FA. You just can’t make this up.

One site that has the story is here:

Disney Vacation Club Website Not Validating User Passwords | DVCNews.com - The essential Disney Vacation Club resource!

At the moment, two-factor authentication codes are the only thing keeping Disney Vacation Club member accounts secure. On November 16, Disney Vacation Club introduced two-factor authentication to

dvcnews.com

(And yes, I tested this out earlier before calling them).

There have been people on it for over a week now I think per the group I'm in. Another bungle on their part. And people wonder why we never want to call Disney IT

 

[Nunu]

A story that is now widely available is that the introduction of 2 factor authentication on the DVC Member website has also managed to screw up the password verification.

Their technical team are aware and told me they are working to fix this as soon as possible. The CM also admitted the flaw was directly caused by the implementation of 2FA. You just can’t make this up.

One site that has the story is here:

Disney Vacation Club Website Not Validating User Passwords | DVCNews.com - The essential Disney Vacation Club resource!

At the moment, two-factor authentication codes are the only thing keeping Disney Vacation Club member accounts secure. On November 16, Disney Vacation Club introduced two-factor authentication to

dvcnews.com

(And yes, I tested this out earlier before calling them).

Thank you for sharing this.
I haven't logged-in since this was implemented, is it still having issues?

 

[nickys]

Thank you for sharing this.
I haven't logged-in since this was implemented, is it still having issues?

Yes.

I got a reply today assuring me they are trying to resolve the issue, and that I can always phone instead of logging in if I prefer. And the inevitable “your feedback is valuable to is”.

 

[Nunu]

Yes.

I got a reply today assuring me they are trying to resolve the issue, and that I can always phone instead of logging in if I prefer. And the inevitable “your feedback is valuable to is”.

Thank you.
Augh, how annoying. Also very inconvenient for those of us having to call from outside the US.

 

[CaptainAmerica]

Can I just say... 2FA suuuuuuuucks.

 

[nickys]

Can I just say... 2FA suuuuuuuucks.

Well Disney’s attempt at it certainly does.

 

[correcaminos]

Yes.

I got a reply today assuring me they are trying to resolve the issue, and that I can always phone instead of logging in if I prefer. And the inevitable “your feedback is valuable to is”.

Ooof

Can I just say... 2FA suuuuuuuucks.

Absolutely!

Well Disney’s attempt at it certainly does.

Absolutely! (bears repeating)

I was saying on the facebook group (in response to someone wanting to use an authenticator) that there is very little I worry enough about to have a 2FA that doesn't even remember a device if I so choose to. Let alone have security flaws. Let alone taking now a week to fix! Just go back and try again later.

Oh and use your testers, I know you have them. That's what they are there for. They miss what the IT coders don't check.

 

[anchorman314]

Oh and use your testers, I know you have them. That's what they are there for. They miss what the IT coders don't check.

As a software developer, I can emphatically say the testers also catch what we do check.

 

[correcaminos]

Just got this on only 1 email too

Dear Disney Vacation Club® Member,

Previously, we notified you of an upcoming change to how Members access their Membership accounts on www.disneyvacationclub.com. During this transition, we learned that one aspect of the process was not working the way we originally intended. Therefore, we have made the decision to revert to the previous login process, and plan to implement additional enhancements in the coming months.

We appreciate your understanding and will continue to provide updates on our efforts.

Sincerely,
Disney Vacation Club

 

[Phonedave]

As a software developer, I can emphatically say the testers also catch what we do check.

Testing also only works if your test environment and reference data is built correctly - unless of course you test in production. Talking as somebody whos' team PMs the launch of a lot of IT driven projects (including launch day command centers and defect resolution)