Executive Club anuncia mudança na tabela de resgate

[ironfire]

Isso não faz sentido algum, minha ultima emissão foi em Dezembro e tenho um amigo com a conta bloqueada que não emite nada há mais de 1 ano.

[davilenz]

ironfire, seu amigo acompanha pelo AwardWallet?

[ironfire]

Eu sim, ele não.

[RodMY]

Eu acompanho pelo AwardWallet, contas com 14 e 35K, nunca emiti nada e não consigo logar em nenhuma delas.

[didogs]

Tive que resetar minha senha, criei outra quando consegui entrar verifiquei que minhas contas estão zeradas, emiti no inicio do mês e só tinha 80k na minhas contas. Por garantia troquei todas minhas senhas e cancelei os programas de controle de pontos, vou voltar para a planilha, rs.rs.rs.

[DaMatta]

essa idéia sobre utilização da conta não faz sentido...não movimento a minha há pelo menos 7 meses...

awardwallet pelo visto tb não foi

fica agora apenas a expectativa de qdo irão devolver nossos avios...kkk

a central da BA no brasil está totalmente vendida...

ironfire, conseguiu falar com a central UK ?

[ironfire]

nao, ontem fiquei em espera 40 minutos e desisti. como foi algo generalizado, agora eh esperar uma posicao oficial deles.

[ironfire]

O award wallet lancou um comunicado rebatendo acusações:

OK, so BA accounts have been hacked today and many folks are concerned that this was related to AwardWallet. We can assure you - we have not been hacked. We have researched this situation thoroughly and here is what we are seeing:

http://onemileatatime.boardingarea.com/2015/03/27/missing-british-airways-avios-youre-not-alone/" onclick="window.open(this.href);return false;
>>>>According the agent I spoke with, over a million accounts were affected


We have a total of 51,523 BA accounts and 12,069 had a zero balance on AwardWallet yesterday. Today 12,950 have a zero balance so 881 BA accounts dropped to zero since yesterday. Yes this is a lot but why wouldn't more of them drop if we were hacked? Also we checked AwardWallet accounts that had BA accounts that we know for a fact were hacked - they had 10+ other loyalty accounts with large balances on AwardWallet, if they were hacked why would the hackers only pick a single provider - BA? This makes no sense.

Also BA is saying:

We understand this was login information relating to a different online service which you may have also used to access your Executive Club account.


We think this is likely the case. Many of us use the same username and password combination on different websites, so if your BA combination was username: "JSmith" password: "bluesky" and you used the same combination to login to abcd.com and abcd.com was compromised then hackers could have tried using these credentials against the BA's website to get into your account. That way we can see how millions of accounts could have been affected.

Also, please review our security practices here:

https://awardwallet.com/faqs.php#10" onclick="window.open(this.href);return false;

We particiapte in a bounty bug hunt with Crowdcurity https://www.crowdcurity.com/awardwallet/" onclick="window.open(this.href);return false; where we pay hackers to find security issues with our service.

Finally for the techies out there here is more info:
Your AwardWallet passwords are hashed with bcrypt, cost:13, plus unique salt for each user.
For the passwords that users store locally on their computers we use Rjindael (similar to AES), 256 bit.
The "remember me" cookie is a sha 256 hash of certain user attributes
Loyalty account passwords are encrypted with 1024 RSA key.
If someone is trying to brute-force your account we will lock them out for a period of time after few invalid login attempts.

[DaMatta]

vlw...bom FDS

abção

[zardox]

Ha 2 semanas atras eu emiti pelo EC e nao tive problemas com meu saldo....
O problema nao tem nada a ver com emissoes recentes..
Eu realmente jamais confiaria minhas milhas a uma empresa desconhecida....
Tenho contas no points.com mas vou tirar de la...vou deixar so as que estiverem com saldo zerado....