Can DVC overbook?

[pangyal]

Let's see if I can post it:

Www.******.com

I pay for the Pro version since the developer works so hard to keep it up to date and I find it so useful.

 

[Wakey]

It says on the bottom its for amusement only and the info may be completely made up- doesn't instill confidence!

 

[pangyal]

It says on the bottom its for amusement only and the info may be completely made up- doesn't instill confidence!

It's a disclaimer. He's been running this app for many years now.

 

[ScubaCat]

I can't believe DVD allows that, although maybe the H1B workers running the dvcmember site just don't realize it (they probably don't have any tools checking logs for suspicious access patterns... big surprise.)

I especially like the part on ******.com where I get to choose to either "verify my DVC login credentials" or pay for the Pro version. So, I get to give the guy some cash or give him my login to the second biggest asset I own. Obviously I chose neither, and instead put bogus junk into the validate credentials form, and it now says I'm now verified and lets me search. Nothing suspicious there.

 

[Wakey]

Yes there is no way I would give him access to my passwords- bogus junk it is thanks for the tip!

 

[ScubaCat]

Yes there is no way I would give him access to my passwords- bogus junk it is thanks for the tip!

The site seems to return mostly valid data, but asking for your DVC login (especially unless you pay) is beyond sketchy. And, no way would he have access to the API to actually validate the login.

 

[bumbershoot]

I can't believe DVD allows that, although maybe the H1B workers running the dvcmember site just don't realize it (they probably don't have any tools checking logs for suspicious access patterns... big surprise.)

Yeah, b/c the really-expensive-to-hire people on those visas are just so stupid and unqualified, LOL. (DH works with many with those visas, and companies don't waste the big bucks that they cost by moving underqualified people over to do a bad job). But really, they hire YOUNG interns to work in the divisions of IT up here in Seattle (for reasons unknown to me). And a quick look at the careers site shows that Seattle would likely be a part of the DVC site work...

Disney Parks & Resorts Digital (DPRD), a division of the Walt Disney Company, creates world-class immersive online & mobile experiences for premier vacation brands including Walt Disney World, Disneyland Resort, Hong Kong Disneyland, Disney Cruise Line and Disney Vacation Club. DPRD has offices in Los Angeles, Seattle, Hong Kong and Orlando where we design and develop results-driven websites and mobile applications.

 

[pangyal]

I can't believe DVD allows that, although maybe the H1B workers running the dvcmember site just don't realize it (they probably don't have any tools checking logs for suspicious access patterns... big surprise.)

I especially like the part on ******.com where I get to choose to either "verify my DVC login credentials" or pay for the Pro version. So, I get to give the guy some cash or give him my login to the second biggest asset I own. Obviously I chose neither, and instead put bogus junk into the validate credentials form, and it now says I'm now verified and lets me search. Nothing suspicious there.

I can't vouch for the developer of course, other than having used this app for a few years and knowing many other members who have as well. I've not had any problems with it and find it useful, and I assume it asks for credentials (whether real or not ) to avoid any action being taken against him if non-members were shown to have gained access to the availability tool without owning DVC contracts. I don't think there's anything nefarious with this app and it's been around for a long time, but I certainly wouldn't stake my membership on it either, lol.

 

[Dean Marino]

Seriously? Someone wants your login credentials?

I love everyone on this board.... but if you are stupid enough to do this? Well, your choice.

WDW has no NEED to ask for credentials..... they already have them. Therefore, you are dealing with a hack. Do as you chose.

 

[pangyal]

I wouldn't have posted it in response to all that asked me to if I hadn't been using it with no problems for the past three years, without having actually supplied any valid credentials. I appreciate how sketchy it seems with asking for login info, but I come from a family of IT security developers, so I do understand the difference between someone who doesn't want potential hassles for running a search index using his own credentials every few hours, versus a phishing scam. I don't get anything if people use it or not, but I'm not ignorant in this area and I do vouch for not having seen or heard of any problems with dozens of members using this app over the last seven or eight years. I agree, though, I certainly wouldn't provide actual credentials to use it! He claims he doesn't store them, but I don't know where that info would get routed to or whether it would get saved somewhere unintentionally, etc.

 

[CarolMN]

It's not all that hard to change a password if one is worried. I've used the app.

 

[crisi]

I can't believe DVD allows that, although maybe the H1B workers running the dvcmember site just don't realize it (they probably don't have any tools checking logs for suspicious access patterns... big surprise.)

I especially like the part on ******.com where I get to choose to either "verify my DVC login credentials" or pay for the Pro version. So, I get to give the guy some cash or give him my login to the second biggest asset I own. Obviously I chose neither, and instead put bogus junk into the validate credentials form, and it now says I'm now verified and lets me search. Nothing suspicious there.

They don't. Their terms of use prohibit it. Mostly because DVC doesn't have an open API and dataset (as I understand it) to provide this information in a way that doesn't tax their production servers - meaning that when you develop something that hits their servers, they need to throw more hardware and bandwidth (i.e. more expense) at it. They also don't get the data mining information they'd like. They probably haven't found it yet because it isn't an issue they've looked for or he'd get the "cease and desist letter"

 

[ScubaCat]

Technically, he could be taking load off of their resort availability search page, so maybe they figure it's a net win for them. The only thing that is suspect to me is the "provide your DVC login OR PAY". It's got to simply be a case of the DVD engineer(s) not finding the page yet.

And clearly he is not validating the credentials (via an API or a simple POST to the login page) as I put in "test" for the username and "blahblah" for the password and it said I was successfully verified. Which begs the question, why ask in the first place if not to nudge me into paying?

EDIT: Uh oh - looks like I hijacked the topic off the original point of this thread. Such is the result of being raised by Italians. Hah. If you like the app, by all means enjoy I don't think there's necessarily any nefarious intent, but asking for DVC credentials is definitely a violation of terms & conditions. But I won't be the one to break the news to DVD, don't worry. (Unless given a reason. Muahahah.)