Ensure email import is secure
I can't find much info about this feature, except that one can send data to import@beeminder.com. Presumably it determines your identity by origin email address. If there's no other other auth then this is insecure, since I can masquerade as another user with publicly available. Information.
6
votes
Ben Eills
shared this idea
It turns out the bot – bot@beeminder.com – is pretty much strictly better than import@beeminder.com , so we’ve shut import@beeminder.com down for good :)