An Interest In:
Web News this Week
- March 22, 2024
- March 21, 2024
- March 20, 2024
- March 19, 2024
- March 18, 2024
- March 17, 2024
- March 16, 2024
Some of Our Sources
- Web Designer Wall
- Smashing Apps
- Abduzeedo
- FanExtra - PSD
- My Ink Blog
- Specky Boy
- Design Modo
- Web Resource Source
- Android Dissected
- Hashedout
Help Webnuz
Referal links:
May 24, 2018 07:40 pm
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/0KWvzua4Pmk/t-mobile-bug-let-anyone-see-any-customers-account-details
T-Mobile Bug Let Anyone See Any Customer's Account Details
An anonymous reader writes: A bug in T-Mobile's website let anyone access the personal account details of any customer with just their cell phone number, ZDNet reported Thursday. The flaw, since fixed, could have been exploited by anyone who knew where to look -- a little-known T-Mobile subdomain that staff use as a customer care portal to access the company's internal tools. The subdomain -- promotool.t-mobile.com, which can be easily found on search engines -- contained a hidden API that would return T-Mobile customer data simply by adding the customer's cell phone number to the end of the web address. Although the API is understood to be used by T-Mobile staff to look up account details, it wasn't protected with a password and could be easily used by anyone. The returned data included a customer's full name, postal address, billing account number, and in some cases information about tax identification numbers. The data also included customers' account information, such as if a bill is past-due or if the customer had their service suspended.Read more of this story at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/0KWvzua4Pmk/t-mobile-bug-let-anyone-see-any-customers-account-details
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot