3 ms·
"We don’t care, our payments are handled by a 3rd party payment provider" "Thanks for your suggestion, but our shop is totally safe. There is just an annoying
by catshirt 10y ago
"We don’t care, our payments are handled by a 3rd party payment provider"
"Thanks for your suggestion, but our shop is totally safe. There is just an annoying javascript error."
please share the stores sending these negligent and insulting responses. they don't deserve any sort of protection.
- 0xmohit 10y agoThere were a couple of occasions quite some time back (circa 2010) when I reported issues to e-commerce sites: - trivial enumeration attacks that could be used to retrieve customer information (name, address, order, payment details, ...) - XSS issues that could be exploited by sending crafted URLs to customers In all cases, I received rather lame responses as if the person in question was completely nonchalant about the issues. All I could do was to avoid those stores myself.
- allendoerfer 10y agoI just contacted all .de-stores (except one or two, who had neither an email address nor a contact form). So far received one response: "We do not even accept credit cards!". Tried to explain to her why foreign code on your site might still be a problem. Expecting many similar responses. Where possible I contacted their developers directly, maybe they will do something.