Following the announcement the Logitech acquired SlimDevices and the
emails to its customers, it is nice to see that the new company takes
its customers security so seriously.

Signing up to their news letter returns a link that looks like this:

http://www.slimdevices.com/subscribe/?p=preferences&uid=74xxx

Simply changing the "uid" in the query parameter above enables you to
view any of SlimDevices customers email addresses.

This is shockingly poor.


-- 
Reuben Wells
------------------------------------------------------------------------
Reuben Wells's Profile: http://forums.slimdevices.com/member.php?userid=13288
View this thread: http://forums.slimdevices.com/showthread.php?t=38585

_______________________________________________
discuss mailing list
[email protected]
http://lists.slimdevices.com/lists/listinfo/discuss

Reply via email to