Website Doesn’t Always Log Me Out – Privacy Concern or Am I Overreacting?
You are absolutely right that the website should not behave like this. I’d say this particular issue is fairly low risk. But it makes me wonder: if they have this problem, what other problems do they have? More serious problems like SQL injection could allow an attacker to steal all the users’ data.
The response from their support department is not satisfactory. However, I’ve found that to be a very widespread problem – even with some services I’m generally happy doing business with.
How much of a problem does this present you? I presume you are trusting the site with some personal data, but how much? How would a breach impact on you? With recruitment site, people often worry about their current employer finding out they are on the site. I would usually think it unlikely that your boss would mount a hacking attack on a site to see if any of the team are using it. It’s far more likely to be an organised cyber crime gang hoping to use the data for financial gain.
There are some practical steps you can take to defend yourself, such as using a single-purpose email address that you’ve created only to use with that site. Ultimately you need to decide if the security risks outweigh the benefits to you of being on the site.