objRS was empty
Reviewers Recommend
Cherie's Pool Party ParfaitCherie's Pool Party Parfait - review by fu_q
Starring: Cherie DeVille, Vince Karter, Mazee the Goat, Jimmy Bud, Ace Hardz, Hollywood Cash. Read review
All Forums > International Shopping > International Shopping Forum Page 16 > Five Star Alert: Critical Security Lapse
AuthorPost
pears
Member


19 Posts
11/03
Posted - Jan 4 2004 : 2:23PM
There is a security lapse at Five Star as attached:

I wanted to view my Wishlist so I click on "View Wishwish". To my horror, the login page for this function is NOT secured. (http instead of https). Potentially, hackers capturing the sign-in information during the view wishlist can use the data to gain access to the Five Star account.

This alert has been posted to Five Star forums as well

Joey Starr
Senior Member

Still wanking after all these years.
8082 Posts
10/00
Posted - Jan 4 2004 : 4:25PM
Rather than shouting about it, wouldn't it be more effective to E-Mail Fivestar direct so they can fix it?

If there is indeed a potential security risk you may have just given hackers an opportunity to do harm before Fivestar fix it...

Just my two cents...

Joey

Edited by - Joey Starr on 1/4/2004 4:26:30 PM

pears
Member

19 Posts
11/03
Posted - Jan 9 2004 : 11:23PM
Good advise. Five Star has since fixed the problem.

You can now sign in safely to Five Star without the fear of having your sign-in information breached.

In layman terms, your sign-in is now protected by the lock icon at the bottom of your browser. This is the standard security feature any online store will have.




Jump To: