www.MarkTAW.com/technology/MoreBN.comThings.html (printable version)

More BN.com Things
The problem is more serious than I initially thought.

I was showing a co-worker the specific problem with BN.com and he tried it with his own account. I realized then that in addition to tracking numbers and links to couriers, it also publishes your billing and shipping information the page with the order.

It shows up something like this:

Payment Information

Credit Card:
Master Card *0123
exp 01/01

Billing Address:
Mark Wieczorek
100 xxx xxxx St.
Apt xxx
Brooklyn, NY 12345
United States

Shipping Information

Shipping Address:
Mark Wieczorek
1 xxxxx Ave.
FLOOR xxx
New York, NY 12345
United States

Which is pretty scary. I mean, between your billing and shipping address, one is likely to be your home address.

According to my server logs, someone from BarnesAndNoble.com visited my website on Wednesday (yesterday) around 1:30pm. There was no referrer.

The curious thing is I don't think I mentioned my website in my e-mail to them, so how did they find out about it? One of my friends told me that her "best friend's sister" worked for BN and she fowarded the e-mail to her, but that was on Thursday morning (today)... Hmmm.

Message Board: http://www.marktaw.com/forum/list.php?f=1

page first created on Thursday, July 11, 2002

this site and it's contents copyright Mark Wieczorek