Security flaw discovered at GExpress.com

[Shinobi128]

For those who have shopped there before, go and remove your account information, that is unless of course it's ok with you to have other people look at your personal and credit information.

To prove my point, if anyone would let me know their username over there I can let you know your information through a PM.

[FX]

Man, I think that Dolemite might be interested in this info. I think he said that he lives near Gexpress, and shops there.

[Shinobi128]

Originally posted by FighterX
Man, I think that Dolemite might be interested in this info. I think he said that he lives near Gexpress, and shops there.

I'm not sure if this affects people who physically shop there, but I know for a fact that this flaw affects those who have shopped online with them.

I just found out because of someone I know online tried it on me and he showed me my personal information, without him ever knowing of it until now.

[FX]

I was thinking more along the lines of how some shops like that have some of your personal information ( ex. telephone ) in the computer for when you shop there often, like Circuit City or Toys R' Us.

Sure it's minor info, but it's personal nonetheless.

[Shinobi128]

Originally posted by FighterX
I was thinking more along the lines of how some shops like that have some of your personal information ( ex. telephone ) in the computer for when you shop there often, like Circuit City or Toys R' Us.

Sure it's minor info, but it's personal nonetheless.

I suppose, but no company should have any kind of personal information available for others to see.

[radiant]

removed my info. cheers.

[Dolemite]

Originally posted by FighterX
Man, I think that Dolemite might be interested in this info. I think he said that he lives near Gexpress, and shops there.

I've only shopped at the Carle Place and NYC stores, not online. And all my transactions were cash, so I'm safe. Thanks for the concern, buddy.

Still, that's crazy that their site security is so lax that people's credit cade info isn't safe. I'll make a point on never shopping on their website.

[Rumpy]

Have you let them know about the flaw? Might be something they should know about and fix.

[Master]

Can they get cc #s or just address and such.

If its just address info, I don't care.

If somebody PMs me, you can HAVE my address.

[Nick]

Thanks, Shinobi. Even though your current avatar makes you look like an Iraqi extremist, you did good.

It's still a great place to buy games, so I hope they get it together.