Popular e-card site has a bug that lets anyone access user photos

Card Factory, a popular UK-based greeting card business, stores some of its customers' data in an insecure way, letting anyone access their photos with an incredibly simple URL trick. 

The site was notified about the issue on October 8 and hasn't fixed it or alerted its customers about it in a week, Mashable has learned. 

UPDATE: Oct. 15, 2018, 6:11 p.m. CEST Card Factory says the security issue has now been fixed. 

“The trust and privacy of our customers is of upmost importance to us. After recently being made aware of this issue, we have applied a security update to our website to ensure it cannot happen again," the company told Mashable. Read more...

More about Security, Security Flaw, Card Factory, Private Data Exposed, and Tech

from Mashable https://mashable.com/article/card-factory-security-flaw/
via Middlesbrough