hoplaa opened this issue on Sep 25, 2009 · 6 posts
hoplaa posted Fri, 25 September 2009 at 1:29 PM
This is what the personalized link to a newsletter looks like (it's addressed to me):
My email address is displayed at the bottom of that page.
Can you guess what happens if the number between the last pair of forward slashes is changed?
That's right, you get another person's newsletter along with their email address. It would therefore be trivial to harvest all the email addresses of the newsletter subscribers, yes?
I don't think this is a good thing. A simple fix would be to remove the email address from the page.
BAR-CODE posted Fri, 25 September 2009 at 1:42 PM
YES your right that is a way to harvest emails..
This is a BAD thing ...and should be FIXED asap
I tryed it and its simple to do ....
Good heads up that you pointed this out !!
Chris
IF YOU WANT TO CONTACT BAR-CODE SENT A PM to 26FAHRENHEIT "same person"
Chris
StaceyG posted Fri, 25 September 2009 at 2:11 PM
I'm pointing the marketing person this way so they can help.
Thank you for bringing this to our attention
JasonK posted Fri, 25 September 2009 at 2:21 PM
We're investigating this now to try and find a solution. Thanks for the heads up!
You friendly neighborhood Marketing Manager here at
Renderosity.
www.renderosity.com
StaceyG posted Fri, 25 September 2009 at 3:45 PM
This has been resolved:)
Thank you again for bringing this to our attention (hoplaa I sent you a sitemail as well)
hoplaa posted Fri, 25 September 2009 at 3:49 PM
I noticed. Thanks :)
