Sears exposes customer information via its web site

[David Farber <dave () farber net>]

________________________________________
From: Rich Kulawiec [rsk () gsp org]
Sent: Friday, January 04, 2008 1:26 PM
To: Fergie; Richard Forno; David Farber
Subject: Sears exposes customer information via its web site

Summary: if you know someone's name, address and phone number, you can
retrieve their purchase history from Sears' web site.

        http://www.benedelman.org/news/010408-1.html

This is an interesting follow-on to the recent discovery that Sears
is pushing spyware:

        http://community.ca.com/blogs/securityadvisor/archive/2007/12/20/sears-com-join-the-community-get-spyware.aspx
        http://www.benedelman.org/news/010108-1.html

---Rsk

-------------------------------------------
Archives: http://v2.listbox.com/member/archive/247/=now
RSS Feed: http://v2.listbox.com/member/archive/rss/247/
Powered by Listbox: http://www.listbox.com