I’ve sent them a message
which will certainly go
unanswered.

It seemed like there might
be some guidelines at the
Safe Harbor web pages. Sad
to say, there is nothing
there indicating encryption
should be used during the
login and password changing
processes.

I used Wireshark to capture
packets during the login
process and during the
password change process.
Both were in the clear using
HTTP instead of HTTPS.

Perhaps this information can
be shared out to Monster and
other companies to fix this
issue. And, shared to the
customers to put pressure
on these companies.

We’ve learned NOT to hold
our breath for these simple,
yet effective security
methods.

Regards,
E L
nojunkmail4ebl@comcast.net