Today I received a couple emails confirming my reservation at the Best Western Appletree and thanking me for opening up a new expedia account. I hadn't made the reservation and called expedia. At the same time, I requested online that my username and password be sent to my email. The interesting thing about expedia is that more than one user name can be registered to the same email. A Michael T. R had created another account with my email address and booked the hotel.

I am not sure what to think of this. It looks like a very serious security flaw to me.

Don't like your boss? Book a rental car and a few (unconfirmed) hotel nights in some offbeat country and create a new account under her name/email address. It sure got me riled up for a few minutes