RE: Security

new topic     » topic index » view thread      » older message » newer message 

Re not showing info to the customer:

THE GLITCH STRUCK a feature at Victoriassecret.com that allows customers 
to check the status of their orders. Before that feature was turned off on
Friday,
the unique number assigned to each customer was revealed in the Web browser’s 
address Window. A browser could simply change the customer number, and in 
some cases, pull up another customer’s orders. 
Officials at Limited Brands Inc., which owns the Victoria’s Secret chain, shut 
down the “order status” feature immediately after receiving a description of the
bug from MSNBC.com.

new topic     » topic index » view thread      » older message » newer message

Search



Quick Links

User menu

Not signed in.

Misc Menu