« previous next »
Pages: [1] 2   Go Down

Author Topic: Sportsmansguide security breach.  (Read 3215 times)

mosbear

  • Very Active Forum Member
  • ****
  • Posts: 135
  • Liked:
  • Likes Given: 0
Sportsmansguide security breach.
« on: January 07, 2009, 11:39:51 AM »
Just came across this discussion on M&P forum. If you are Sportsmansguide customer take a look:

http://mp-pistol.com/boards/index.php?showtopic=18332&st=0

 
Logged

ericire12

  • Top Forum Member
  • *****
  • Posts: 7926
  • DRTV Ranger
  • Liked:
  • Likes Given: 0
Re: Sportsmansguide security breach.
« Reply #1 on: January 07, 2009, 11:42:36 AM »
We need to light up Sportsmans Guide with emails and get this fixed!
Logged
Everything I needed to learn in life I learned from Country Music.

1776 Rebel

  • Guest
Re: Sportsmansguide security breach.
« Reply #2 on: January 07, 2009, 12:07:53 PM »
Apparently was fixed or at least disabled a couple of days ago according to the m&p thread. I just tried some lookups and no dice.
Logged

ericire12

  • Top Forum Member
  • *****
  • Posts: 7926
  • DRTV Ranger
  • Liked:
  • Likes Given: 0
Re: Sportsmansguide security breach.
« Reply #3 on: January 07, 2009, 01:02:03 PM »
Quote from: 1776 Rebel on January 07, 2009, 12:07:53 PM
Apparently was fixed or at least disabled a couple of days ago according to the m&p thread. I just tried some lookups and no dice.

It is working for me..... used generic names like "Smith" and various zip codes and can find many different results.
Logged
Everything I needed to learn in life I learned from Country Music.

PegLeg45

  • NRA Life, SAF, Constitutionalist
  • Top Forum Member
  • *****
  • Posts: 13265
  • DRTV Ranger
  • Liked:
  • Likes Given: 1363
Re: Sportsmansguide security breach.
« Reply #4 on: January 07, 2009, 01:15:44 PM »
Didn't work for me. Maybe they got it fixed. I'd hate to stop buying from them.
Logged
"I expect perdition, I always have. I keep this building at my back, and several guns handy, in case perdition arrives in a form that's susceptible to bullets. I expect it will come in the disease form, though. I'm susceptible to diseases, and you can't shoot a damned disease." ~ Judge Roy Bean, Streets of Laredo

For the Patriots of this country, the Constitution is second only to the Bible for most. For those who love this country, but do not share my personal beliefs, it is their Bible. To them nothing comes before the Constitution of these United States of America. For this we are all labeled potential terrorists. ~ Dean Garrison

"When it comes to the enemy, just because they ain't pullin' a trigger, doesn't mean they ain't totin' ammo for those that are."~PegLeg

Sponsor

  • Guest
Re: Sportsmansguide security breach.
« Reply #5 on: Today at 09:13:27 AM »
Logged

Big Frank

  • NRA Benefactor Member
  • Top Forum Member
  • *****
  • Posts: 11223
  • DRTV Ranger
  • Liked:
  • Likes Given: 1539
Re: Sportsmansguide security breach.
« Reply #5 on: January 07, 2009, 06:43:03 PM »
I tried common names like Smith and Jones and some different zip codes my city and for some of them one name and address came up. For some there were so many it wants to know which address, which I could enter from the phone book if I wanted. I tried Anderson and Williams too. Now I know the names and adresses of some complete strangers and exactly what they ordered. I clicked on the UPS tracking button and know exactly when each package was delivered too. It's scary that this information is available to anyone. People should have to sign into their own account to get any information, just like most other websites.
Logged
""It may be laid down as a primary position, and the basis of our system, that every Citizen who enjoys the protection of a free Government, owes not only a proportion of his property, but even his personal services to the defence of it, and consequently that the Citizens of America (with a few legal and official exceptions) from 18 to 50 Years of Age should be borne on the Militia Rolls, provided with uniform Arms, and so far accustomed to the use of them, that the Total strength of the Country might be called forth at a Short Notice on any very interesting Emergency." - George Washington. Letter to Alexander Hamilton, Friday, May 02, 1783

THE RIGHT TO BUY WEAPONS IS THE RIGHT TO BE FREE - A. E. van Vogt, The Weapon Shops of Isher

tombogan03884

  • Guest
Re: Sportsmansguide security breach.
« Reply #6 on: January 08, 2009, 01:28:35 AM »
I just tried it with a friends name and got his whole order history !  :(
Logged

cooptire

  • Top Forum Member
  • *****
  • Posts: 397
  • DRTV Ranger
  • Liked:
  • Likes Given: 0
Re: Sportsmansguide security breach.
« Reply #7 on: January 08, 2009, 02:48:41 PM »
Funny.......but not really, I too did some random names and inadvertently came up with our local Deputy Chief of Police's orders! This REALLY needs to be fixed. ( Duh!  ::) )
Logged
"Guard with jealous attention the public liberty. Suspect everyone who approaches that jewel. Unfortunately, nothing will preserve it but downright force. Whenever you give up that force, you are ruined." Patrick Henry

Big Frank

  • NRA Benefactor Member
  • Top Forum Member
  • *****
  • Posts: 11223
  • DRTV Ranger
  • Liked:
  • Likes Given: 1539
Re: Sportsmansguide security breach.
« Reply #8 on: January 08, 2009, 05:14:15 PM »
Quote from: cooptire on January 08, 2009, 02:48:41 PM
Funny.......but not really, I too did some random names and inadvertently came up with our local Deputy Chief of Police's orders! This REALLY needs to be fixed. ( Duh!  ::) )


If you tell him about it maybe he can do something.
Logged
""It may be laid down as a primary position, and the basis of our system, that every Citizen who enjoys the protection of a free Government, owes not only a proportion of his property, but even his personal services to the defence of it, and consequently that the Citizens of America (with a few legal and official exceptions) from 18 to 50 Years of Age should be borne on the Militia Rolls, provided with uniform Arms, and so far accustomed to the use of them, that the Total strength of the Country might be called forth at a Short Notice on any very interesting Emergency." - George Washington. Letter to Alexander Hamilton, Friday, May 02, 1783

THE RIGHT TO BUY WEAPONS IS THE RIGHT TO BE FREE - A. E. van Vogt, The Weapon Shops of Isher

mosbear

  • Very Active Forum Member
  • ****
  • Posts: 135
  • Liked:
  • Likes Given: 0
Re: Sportsmansguide security breach.
« Reply #9 on: January 08, 2009, 05:38:24 PM »
To fix this thing in the code is a peace of cake, when you are forcing the user to sign-up prior to any activity other then browsing. The problem is they don’t require permanent account to be created to make a purchase. They use "cookies" to identify the user and to keep track of the items in the basket. This could only be fixed by changing the business rules of the site, which they are not willing to do. Apparently one-off type of the transaction volume is high enough to justify their behavior. It is not a clear-cut case so; lawyers wouldn't work "pro bono" unless you are really harmed by this business practice. Creating a shit storm on the Internet could do the trick, but I am not 100% sure. ???
Logged
Pages: [1] 2   Go Up
« previous next »
 

SMF spam blocked by CleanTalk