[AT] New Harbor Freight website it has a major security hole.

[Larry Goss]

I suspect that HF does not send an order to the factory to make the lathe accessories until they receive an order from a customer.  My experience has been that the backorder takes about 3 months.  BTW, lathe parts that "should be turned to size" are delivered oversize so you can do the finish turning with the item mounted on the head stock.  I didn't expect that sort of customer care out of Harbor Freight.  I wish they provided metric set screws on their jaws, but those are not included and aren't even noted on the IPL's.  Fortunately, Ace Hardware keeps them in stock.

Larry


----- Original Message -----
From: Alan Riley <arr44 at suddenlink.net>
Date: Friday, April 30, 2010 11:37
Subject: Re: [AT] New Harbor Freight website it has a major security hole.
To: Antique tractor email discussion group <at at lists.antique-tractor.com>

> I ordered a steady rest for a lathe using their website on the 
> 26th without
> any apparent problems.  Of course I have already received a 
> postcardin the mail saying the item is on backorder.  Maybe 
> in about 6 months
> I'll receive the item. :>(
> 
> Alan
> 
>  
>   ----- Original Message ----- 
>   From: Steve W. 
>   To: ATIS LIST ; Engine list ; Metal Casting 
>   Sent: Thursday, April 29, 2010 10:34 PM
>   Subject: [AT] New Harbor Freight website it has a major 
> security hole.
> 
> 
>   DO NOT USE IT!!!!
> 
>   I went there and looked it over. Yes it's slow. They have 
> a notice that
>   if you had an account prior to the 19 you need to sign up 
> for a new one.
> 
>   I clicked the account button to create a new account.
> 
>   Instead of getting any type of account log in or sign-up 
> page I was sent
>   to the account of a person who lives in the 914 area of 
> NY. It listed
>   the name,address,phone numbers and recent orders for this 
> person.
>   Thinking this was a glitch I tried to exit and reload the page.
>   It brought up a new page with the account information of 
> a person in
>   Wisconsin!
> 
>   I closed down the browser, flushed the memory and went 
> back to the site
>   to see if I could get in. Went to the same "secure" 
> section of the site
>   and tried the account button again. It took me to yet 
> another members
>   account information!
> 
>   I just sent the customer service an E-mail about it but 
> don't know if
>   they will take action.
> 
>   -- 
>   Steve W.
>   (\___/)
>   (='.'=)
>   (")_(")
>   _______________________________________________
>   AT mailing list
>   http://www.antique-tractor.com/mailman/listinfo/at
> _______________________________________________
> AT mailing list
> http://www.antique-tractor.com/mailman/listinfo/at
>