Online Sewing Class: Restyling with Exposed Zippers
SIGNUP - FREE Membership and 1 FREE Sewing Lesson
| FAQ | Login
 

Forum > Patterns and Notions > Vogue Patterns Web Site ( Moderated by Sharon1952)

Please LOGIN or Join PatternReview
Go to Page:
Vogue Patterns Web Site
MAJOR Security issue - was resolved!
Nancy1955
star
Nancy1955
USA
Member since 5/10/10
Posts: 279
Skill: Beginner
Send Message

      
thumbsup 1 member likes this.



Date: 4/12/14 10:25 PM

I decided to take a look at the Vogue patterns web site - I hadn't even logged in yet and at the top it right corner, it said Welcome Carol and I am able to access all information about a Carol Stoner including all her account information and the ability to change her password!
I emailed the web site to let them know about the issue.
I just refreshed their web page and now I'm able to view another account!

I am very concerned about my information stored on that web site.

In the past five minutes I've viewed over a dozen profiles and none of them are mine.

I can also view all order history for all orders placed over the last few minutes. ALL ORDERS.


-- Edited on 4/12/14 10:31 PM --

AdaH
star
AdaH
Iowa USA
Member since 11/21/09
Posts: 2497
Skill: Intermediate
Send Message

      



Date: 4/12/14 10:37 PM

That doesn't sound good.

------
Ada

KitnRose
star
KitnRose
Member since 6/18/03
Posts: 2112
Skill: Intermediate
Send Message

      



Date: 4/12/14 10:42 PM

Apparently I'm Phyllis Perry. This ... isn't good.

Emailed the website in absence of any other way to tell them about the major issue.

------
Kit
"Never underestimate the power of the right dress!" - drsue
"Hyu gots to know how to sveet tok de costumers, dollink" - Girl Genius, 11-24-08

j Renee Design
star
j Renee Design
Wisconsin USA
Member since 7/26/10
Posts: 867
Skill: Intermediate
Body Type:
Send Message

      



Date: 4/12/14 10:47 PM

Yeesh. Hope they call someone in ASAP to deal with this problem. It sounds like Heartbleed has hit Vogue! :/

------
Jess
Sewing, Knitting, Living: http://www.sometimessewist.wordpress.com

2013 - Bought: 181, Used: 96, Stashed: 85
2014 - B: 108, U: 132, S: 62 1/4
2015 - Carryover: 62 1/4, B: 23 3/8, U: 29 3/4, S: 55 7/8

Nancy1955
star
Nancy1955
USA
Member since 5/10/10
Posts: 279
Skill: Beginner
Send Message

      



Date: 4/12/14 10:48 PM

I posted to their Facebook account. I strongly suggest that others do as well.

I had also emailed them when I discovered it.
-- Edited on 4/12/14 10:50 PM --

wendyrb
wendyrb  Friend of PR
California USA
Member since 12/30/11
Posts: 3689
Skill: Advanced
Body Type:
Send Message

      



Date: 4/12/14 10:58 PM

This news makes me a little nervous as I placed an order today for the Club BMV sale. Having read the 1st post, I went to Vogue Patterns and on the top right it said Welcome (no name) and Log Out. This gives the impression that I was logged in (I wasn't), but did not identify me by my name or any name. I went to "My Account" and it came up blank for me to fill in- no ID. I hope others chime in with what they experience.

I just had an excellent customer service experience with McCalls- prompt and helpful. So let's see what they can do on this.

------
Always keep your words soft and sweet, just in case you have to eat them. Andy Rooney

Pfonzie- my honey Pfaff Creative Performance and Pfaff Passport, Bernina 930 and 830, Evolution and Enlighten sergers

Nancy1955
star
Nancy1955
USA
Member since 5/10/10
Posts: 279
Skill: Beginner
Send Message

      



In reply to wendyrb <<


Date: 4/12/14 11:02 PM

It looks like the issue started today at 11:42am - I am able to view orders placed on the web site since that time.
-- Edited on 4/12/14 11:06 PM --

wendyrb
wendyrb  Friend of PR
California USA
Member since 12/30/11
Posts: 3689
Skill: Advanced
Body Type:
Send Message

      



In reply to Nancy1955 <<


Date: 4/12/14 11:17 PM

Please be looking for a PM from me. Thanks for your offer of help. Also, as a separate order, I renewed my Club BMV at 11:36 west coast time, so it too probably falls into the problematic time zone.

------
Always keep your words soft and sweet, just in case you have to eat them. Andy Rooney

Pfonzie- my honey Pfaff Creative Performance and Pfaff Passport, Bernina 930 and 830, Evolution and Enlighten sergers

frame
star
frame
USA
Member since 2/19/04
Posts: 5024
Skill: Advanced
Send Message

      



In reply to Nancy1955 <<
thumbsup 1 member likes this.


Date: 4/12/14 11:23 PM

I just went to the website and I was able to view someone's account. An account that wasn't mine. I could see all the orders, but they were all dated today even though I'm sure no one would place 20 orders in one day. I logged out and now I am just a guest.

I'm afraid to sign in and see what happens to my own account.

------
"framed" was taken
"I meant what I said, and I said what I meant." - Horton(Dr. Seuss)

***When all else fails, call Tiffany.***

jannw
starstarstarstar
jannw
Washington USA
Member since 9/3/06
Posts: 8552
Skill: Intermediate
Send Message

      



Date: 4/12/14 11:38 PM

I ordered two weeks ago and I just went to check....my first page of McCalls says "welcome Brenda" with an email address in Australia!

------
2009-113.25 yds
2010-115.5
2011-80.25+30+donated
2012 86.3 yds..
2013 21.0
Everyone who sews seriously has a stockpile of fabrics, because it is natural to purchase more than can be sewn in any one season" Singer, Timesaving Sewing, 1987

Go to Page:
Please LOGIN or Join PatternReview

printable version Printable Version

* Advertising and soliciting is strictly prohibited on PatternReview.com. If you find a post which is not in agreement with our Terms and Conditions, please click on the Report Post button to report it. Patterns and Notions >> Vogue Patterns Web Site

Merchants on PR

Patterns from the Past


vintage sewing patterns
Deals!

Reconstructing History


Historical Patterns
Web site

O! Jolly! Shop


Sweater knit fabrics
Web site

Elliott Berman Textiles


Fabrics for Greater Ideas
Deals!

Amulet Swim Fabrics


Poly/PBT swimwear fabric
Web site

 
adv. search»
pattern | machine | member
        
Online Class
Sew a Designer Unlined Jacket
Sew a Designer Unlined Jacket

Class Details

Online Class
Blueprints to Blue Jeans
Blueprints to Blue Jeans

Class Details

Christine Jonson Inset Jacket

Christine Jonson Inset Jacket

Pattern Details
Petite Plus 201 Pattern

Petite Plus 201 Pattern

Pattern Details

Conditions of Use | Posting Guidelines | Privacy Policy | Shipping Rates | Returns & Refunds | Contact Us | About | New To PR | Advertising

Copyright © 2015 PatternReview.com® , OSATech, Inc. All rights reserved.