3 ms·
It is weird that Netflix is allowing James to update Eve's payment information without logging into Eve's account. I think that is the actual security vulnerabi
by aladagemre 9y ago
It is weird that Netflix is allowing James to update Eve's payment information without logging into Eve's account. I think that is the actual security vulnerability.
On the other hand, e-mail verification should be done eventually to protect Eve from James to recovering her account in case Eve had a typo unintentionally.
- mulmen 9y agoPretty sure he reset the account password using the email he has. That allowed him to access the account and view the payment information. This is why validating email addresses is critical before accepting payment information to a subscription service.