I phoned their support line to get a password re-set,
The conversation went like this...
SG > I need to get a password for my eportfolio please
RCGP Helpdesk > OK can you give me your GMC number
SG > 99999999
RCGP> Is that Dr Galloway?
SG> Yes it is
RCGP> Can you tell me your date of birth
SG> Yes its blah blah blah
RCGP> and your postcode
SG> Yes thats blah blah blah
RCGP> OK your password is "something99"
So the secret questions are
your email address
DOB
and your postcode
and passwords is clearly not salted and hashed on the database because
the help desk can read it.
Out of interest it seems trivially easy to find email addresses, DOB
(from BMD register), mothers maiden name, who is living at their home
address (electoral roll), work and home postcode
http://www.192.com/atoz/people/gerada/clare/
http://www.123people.co.uk/s/clare+gerada
http://www.shipman-inquiry.org.uk/getdocument.asp?docid=HS2700001
|