Staples.com -> Security Flaw -- What should I do

[mscdex0]

If you PM to BB this makes this deal $13 AR! HOT HOT!!

 

[Monkeytool]

Originally posted by: dbleoslow
One way to get around this is to change your IP address to: 127.0.0.1. This is the "safety IP" that will keep this sort of thing from happening.

:laugh: :laugh: :laugh:

And stay there!

 

[Glendor]

Originally posted by: richardycc
I see your order, and why are you buying so many toilet cleaner, are you a janitor?

LOL!!!!!!!!!!!!!

 

[JuicyLucy]

Learn first how to make a proper HOT DEALS thread you AOL retard

 

[Lemodular]

LOL.....that's hilarious

Originally posted by: Quasmo
try typing in "poop" in the search engine see what comes up then tell me how smart the web devs are at Staples. All for laughs try "poorly manufactured parts" I had alot of time to play around while working there. Their website needs a HUGE overhaul.





From the search:
We have 2256 product(s) on our site containing poorly manufactured parts.
The following results matched your search:

Electronic Label Maker Tapes    Visit this category    for an exact match

 

[WA261]

Originally posted by: JuicyLucy
Learn first how to make a proper HOT DEALS thread you AOL retard

Yeah, this is they type of comment we just love here at Anand....

 

[emeraldsky]

Originally posted by: JuicyLucy
Learn first how to make a proper HOT DEALS thread you AOL retard

This is known as thread crapping.
It is also know as flaming.
Neither one are permitted here.

 

[alm4rr]

Originally posted by: JuicyLucy
Learn first how to make a proper HOT DEALS thread you AOL retard

God, what is your major malfunction

So far, every time I see you post in HD, all you do is spit vileness
Get real noob

 

[AnyMal]

Originally posted by: JuicyLucy
Learn first how to make a proper HOT DEALS thread you AOL retard

You should get the sand out of your vagina :roll:

 

[1ucid]

stop stroking your gd ego

 

[statik213]

Originally posted by: dbleoslow
Did you feel that breeze as the suttle joke raced over the top of your head

 

[thedealmaker]

what's the flaw? tell me, tell me, so I can blackmail Staples for millions of dollars and get all you guys' credit card.

 

[statik213]

Originally posted by: FPSguy
UN-BE-LIEVABLE. It's pretty obvious what the issue is from the fact that you have to use the same computer, that automatically logs in, and then look at the response e-mail from Staples. I confirm that my password is viewable in plain text as well.

I love how it says "// For security purpose, user can't use back button to browse the previous page.", and yet they make your password plainly visible. Clearly "eknizek" could have done a better job with that page.

LOL, looked at more of the source code just now... how lame!!!
ekizek needs to get fired

 

[statik213]

Originally posted by: thedealmaker
what's the flaw? tell me, tell me, so I can blackmail Staples for millions of dollars and get all you guys' credit card.

AM already working on it.... why would I share the cut?

 

[HuzorDaddy]

Im in for one. This is blazing hot.

 

[sjwaste]

Why so much making fun of the OP over this? On other hot deals boards, its usually the members looking out for one another. Hey OP, send me a pm with how to reproduce the problem and tell me if you're using internet explorer, firefox, or a different browser. I'll try it with my own account and email staples with documentation on what I see. If its happening to more than one person, they should hear about it from others too. They'll be more apt to fix it.

 

[Zontor]

OK, found it....>>LAME<< on Staples part....

Given that it is a session cookie, it will expire fairly soon (I'm guessing < 20 minutes) -- I haven't tested this, but will.

This isn't a *major* flaw, but it underscores the ability to always log out of sites, clear cache, clear cookies, close browser, etc.

Even then you can't stop dumbass things...

BTW: Looks like the code was updated 2/25/02 -- so this has been here for a while....

 

[statik213]

it has nothing to do w/ session cookies.

 

[Zontor]

You are correct...not Session cookies....I looked into this a bit more and figured out what is going on. My bad.

 

[ECartman]

Originally posted by: dbleoslow
Did you feel that breeze as the suttle joke raced over the top of your head

Actually I missed it too ... must have been too "suttle"

 

[Kostya17]

This is clearly off-topic and should be locked. Hey mods, where are you?

Ok, let me help ya... Computer Geeks' 10% off coupon code is GEEKMOM

NOW there is a hot deal in this thread ;-)

Enjoy!

 

[mscdex0]

Originally posted by: Kostya17
This is clearly off-topic and should be locked. Hey mods, where are you?

Ok, let me help ya... Computer Geeks' 10% off coupon code is GEEKMOM

NOW there is a hot deal in this thread ;-)

Enjoy!

Like you're one to talk, posting coupon codes.... :roll: