I'm fielding an odd question and curious what you ...
# general
c
I'm fielding an odd question and curious what you think: Is the NetSuite Account ID a sensitive piece of information, such that it being displayed in the Customer Center URL constitutes a security risk?
m
I don't think it is personally. I would view it the same way I view a public key.
If a malicious user got a hold of your company's netsuite account id, I don't think they could do anything with it.
@Catherine Fray Did anyone convince you otherwise?
c
@Marc Reicher No, not at all. Dealing with an extremely cautious infosec group. Mostly wanted to confirm I wasn't missing any opportunities for mischief. The only thing that occurred to me was that if someone managed to steal a customer's login credentials, and get the account ID, they could then construct an elaborate phishing site mocked up to look like NetSuite Customer Center to steal other customer's credit card numbers. Fun mental exercise but not a real threat, IMO.
👍 1