Prev: Did the French just ban crash helmets?
Next: Biker clocked riding at 140 mph in Kent
From: YTC#1 on 20 May 2010 15:34
.... you place an order for some parts online, and the confirmation email
starts

---8<
A Cusomter Successfully Paid for the following order:

Order Date: Thursday 20th of May 2010 20:23:30
---8<

--
Bruce Porter
XJR1300SP, XJ900F, Pegaso 650 Trail (x2) one red one grey
POTM#1(KoTL), WUSS#1 , YTC#1(bar), OSOS#2(KoTL) , DS#3 , IbW#18 ,Apostle#8
"The internet is a huge and diverse community and not every one is friendly"
http://www.ytc1.co.uk
There *is* an alternative! http://www.openoffice.org/

From: Simon on 21 May 2010 10:51
On May 20, 8:34 pm, YTC#1 <bdp-spam...(a)ytc1.co.uk> wrote:
> ... you place an order for some parts online, and the confirmation email
> starts
>
> ---8<
> A Cusomter Successfully Paid for the following order:
>
> Order Date: Thursday 20th of May 2010 20:23:30
> ---8<

Nice. I bought a bike seat cushion from the US last year (polymer
gell type thingy that is absolutely superb). Their website has an
order section with no https in sight. When you entered your credit
card details [1], item you were ordering, email address and contact
details a javascript:alert box jumped up telling you that the
transaction was secured by 128 bit SSL encryption and you will receive
an email.

What it was actually doing was doing a HTTP POST to a formmail page
that sent an email to the store. With your credit card in plain text
in the email.

I told the guy running the business it was not secured but he was
adamant it was. Presumably he had been told by his web monkey that it
was secure.

[1] Yeah - honest!

The form results were:







Thank You For Filling Out This Form

Below is what you submitted to xxxx(a)xxxx.com on Friday, May 21, 2010
at 10:48:31

firstname: a

lastname: c

middle: MI

StreetAddress: b

AdditionalAddress: d

City: d

State: al

ZIP: 12345

EMAIL: e(a)e.com

Phone: 1234567890

CCType: AE

CCNumber: 1111111111111111

Expmth: 1

Expyear: 2010

CCV: 123

PROD_PP_57.00_57.00: 1

FABTYPE: Luster

TOTAL: 57.00

SUBMIT: SUBMIT FORM
From: Tosspot on 22 May 2010 04:13
YTC#1 wrote:
> ... you place an order for some parts online, and the confirmation email
> starts
>
> ---8<
> A Cusomter Successfully Paid for the following order:
>
> Order Date: Thursday 20th of May 2010 20:23:30
> ---8<

LOL! We get that at our place. Young Graduates Trainees who think Erkle is
Dogs gift to programming, cobble something together, and 12 months later leave
us with it. We then spend 5 years trying understand what it was all about and
if we need it.
 | 
Pages: 1
Prev: Did the French just ban crash helmets?
Next: Biker clocked riding at 140 mph in Kent