[thechat] BN.com The Hole Story

[Madhu Menon]

http://www.wired.com/news/business/0,1367,53942,00.html

For those of you who shop at Barnes and Noble:

<quote>

Shopping at BarnesandNoble.com can leave your life as easy to read as an
open book.

Mark Wieczorek found that through a flaw in bn.com's website, his personal
information was easily accessible to anyone who used his discontinued
e-mail address.

The hole allows a new account to be created using a previously discontinued
address with nothing more than a new password. The new account then
displays the previous user's name, address, last four numbers of their
credit card and their order history.

</quote>

Madhu