Sears exposes customer information via its web site

[Richard Forno <rforno () infowarrior org>]

------ Forwarded Message

From: Rich 

Summary: if you know someone's name, address and phone number, you can
retrieve their purchase history from Sears' web site.

 http://www.benedelman.org/news/010408-1.html

This is an interesting follow-on to the recent discovery that Sears
is pushing spyware:

 http://community.ca.com/blogs/securityadvisor/archive/2007/12/20/sears-com-
join-the-community-get-spyware.aspx

 http://www.benedelman.org/news/010108-1.html



_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml