View Single Post
  #9   Report Post  
Posted to rec.crafts.metalworking
Erik[_5_] Erik[_5_] is offline
external usenet poster
 
Posts: 425
Default Harbor Freight website redesigned

In article ,
"Steve W." wrote:

Beryl wrote:
Ignoramus15135 wrote:
On 2010-04-30, Steve W. wrote:
Ignoramus15135 wrote:
All the old links to items no longer work... They will soon lose a lot
of pagerank and inbound traffic for nothing... Talk about lousy
SEO... It is also slow. The site, though, looks good.
i

DO NOT USE IT!!!!

The new site has a MAJOR security issue.

I went there and looked it over. Yes it's slow. They have a notice that
if you had an account prior to the 19 you need to sign up for a new one.

I clicked the account button to create a new account.
Instead of getting any type of account log in or sign-up page I was sent
to the account of a person who lives in the 914 area of NY.
Thinking this was a minor glitch I tried to exit and reload the page.
It brought up a new page with the account information of a person in
Wisconsin!

I closed down the browser, flushed the memory and went back to the site
to see if I could get in. Went to the same "secure" section of the site
and tried the account button again. It took me to yet another members
account information!

I just sent the customer service an E-mail about it but don't know if
they will take action.


I just tried the same thing, and did not get your result.
i


I got a 'create new account' page.
I clicked the speaker icon to get an audio challenge, rather than type
the two words shown. Expected to hear the two words... instead ... it
was funny!


Well I just cleared the cache and went back again. This time I got
results for a male in California!

I would say this is a problem if it is only one machine that can do it.
Oh and by information I mean the persons
Mailing address, Shipping address, Credit card number, order
information, personal settings, E-mail settings, reorder and
cancellation info as well as the ability to change any of the above!


All the same stuff that I would expect to be able to access as a
customer signed in to my own account. Which I STILL haven't been able to
get to.



Hmmm... I haven't been able bring up any leaked info using Safari on my
Mac. However, I've never had an account with HF either... so I guess I
don't have a dog in this fight.

HF's administrative and technical contact phone, address and e-mail info
can easily be had by running:

harborfreight.com

through:

http://www.whois.com/

I was going to just post the contact info here, but then had second
thoughts... all I need now is HF brass snapping up my ass.

If HF had any of my info, I'd be on them like a starving Chihuahua on a
pork chop.

Hope no one gets burned...

Erik