GRRR!
Online shopping site (no, not that one). I placed an order a little while ago, it's on it's way to me. They send me an email. Unlike the other five emails a day they send me which are just advertising, this one is about my order.
It's a shipping status, it's cleared customs. Great. There's a Track Package link. Click. Takes me to the website, where I have to log in.
Now, this site doesn't let you have a password. You give them your email address, and they send you a code to enter, every time, like a crappy, failed version of 2FA.
So I click that, and wait for the email with my code. Which is sent to the same email address I'm already looking at, because that's where I clicked the link from. I get the code, enter it, navigate to tracking my package... and it's only the same information that was already in the first email.
Like, what the hell am I busting my ass for, if you have no more info for me anyway?
And what's the deal with sending the code to the same email I just linked in from? Reminds me of the time twenty years ago when I called to get my credit card balance, and all of the verification questions they asked me were things *in my wallet*, where my credit card would be if lost or stolen. That is not security, and I thought we were better than that now.