[ic] Heads up about a security flaw with UPS's new Delivery
Intercept service
Jon Jensen
jon at endpoint.com
Wed May 9 23:30:48 EDT 2007
On Tue, 8 May 2007, Louie Martinez wrote:
> So the person who ordered all these items called them up claiming to be
> our company and had them redirect the packages to a new address. As far
> as the credit card processor was concerned, all the info was legitimate,
> and UPS dropped the ball by letting ANYONE with half a brain to request
> the order be diverted to a new address. We would have never known until
> people started calling us screaming about their credit cards. We just
> happened to catch it in time and stop every order.
>
> UPS apparently does not care when we brought this to their attention.
> They simply said not to send out the tracking numbers which is idiotic.
> Most customers who order online want to track their packages.
Louie,
Thank you very much for letting us all know! That sounds like a scam that
many e-commerce sites will be vulnerable to.
Jon
--
Jon Jensen
End Point Corporation
http://www.endpoint.com/
More information about the interchange-users
mailing list