[Discuss] Another tale of social engineering

[Daniel Barrett]

>Amazon Quietly Closes Security Hole After Journalist's Devastating Hack
>...

Well, at least it's nice to see Amazon actually closing a security hole.
In 2009, I unintentionally uncovered a hole in their purchase process for
digital products that lets you download all the MP3's you want for free. I
reported it to Amazon customer service several times over the course of a
year, both by email and phone, and nobody ever did anything about it. For
all I know, it's still there.  Maybe I should have called Wired. :-)

--
Dan Barrett
dbarrett at blazemonger.com