It's no more stupid than using Tencent to commit fraud.

by fearless on 2008-07-08 16:09:34

From this incident, it can be seen that there are still loopholes in Tencent's Web security system. These loopholes are not technical, but logical. On my own machine, while the QQ number login status is active, I still need to input my account and password to log in when accessing Tencent sites. Whether this is reasonable or not aside, at least this method, which appears safer, is actually not secure. It's like using a bank card; if it always requires you to enter your password, there's a chance someone might peek at it one day, especially when entering the password becomes a habit. Tencent is well-known for its meticulousness, so I believe their product team has the ability to fix these kinds of logical security vulnerabilities.