[AT] New Harbor Freight website it has a major security hole.

[Alan Riley]

I ordered a steady rest for a lathe using their website on the 26th without
any apparent problems.  Of course I have already received a postcard
in the mail saying the item is on backorder.  Maybe in about 6 months
I'll receive the item. :>(

Alan

 
  ----- Original Message ----- 
  From: Steve W. 
  To: ATIS LIST ; Engine list ; Metal Casting 
  Sent: Thursday, April 29, 2010 10:34 PM
  Subject: [AT] New Harbor Freight website it has a major security hole.


  DO NOT USE IT!!!!

  I went there and looked it over. Yes it's slow. They have a notice that
  if you had an account prior to the 19 you need to sign up for a new one.

  I clicked the account button to create a new account.

  Instead of getting any type of account log in or sign-up page I was sent
  to the account of a person who lives in the 914 area of NY. It listed
  the name,address,phone numbers and recent orders for this person.

  Thinking this was a glitch I tried to exit and reload the page.
  It brought up a new page with the account information of a person in
  Wisconsin!

  I closed down the browser, flushed the memory and went back to the site
  to see if I could get in. Went to the same "secure" section of the site
  and tried the account button again. It took me to yet another members
  account information!

  I just sent the customer service an E-mail about it but don't know if
  they will take action.

  -- 
  Steve W.
  (\___/)
  (='.'=)
  (")_(")
  _______________________________________________
  AT mailing list
  http://www.antique-tractor.com/mailman/listinfo/at