SIGNUP - FREE Membership and 1 FREE Sewing Lesson
| FAQ | Login
 

Platinum Sponsor
Fashion Fabrics Club
Fashion Fabrics Club

Forum > Patterns and Notions > Vogue Patterns Web Site ( Moderated by Sharon1952)

Please LOGIN or Join PatternReview
Go to Page:
Vogue Patterns Web Site
MAJOR Security issue - was resolved!
Nancy1955
star
Nancy1955  Friend of PR
Beginner
USA
Member since 5/10/10
Posts: 272
Send Message

      
thumbsup 1 member likes this.



Date: 4/12/14 10:25 PM

I decided to take a look at the Vogue patterns web site - I hadn't even logged in yet and at the top it right corner, it said Welcome Carol and I am able to access all information about a Carol Stoner including all her account information and the ability to change her password!
I emailed the web site to let them know about the issue.
I just refreshed their web page and now I'm able to view another account!

I am very concerned about my information stored on that web site.

In the past five minutes I've viewed over a dozen profiles and none of them are mine.

I can also view all order history for all orders placed over the last few minutes. ALL ORDERS.


-- Edited on 4/12/14 10:31 PM --

AdaH
star
AdaH  Friend of PR
Intermediate
IA USA
Member since 11/21/09
Posts: 2483
Send Message

      



Date: 4/12/14 10:37 PM

That doesn't sound good.

------
Ada

KitnRose
star
KitnRose
Intermediate
TX USA
Member since 6/18/03
Posts: 2080
Send Message

      



Date: 4/12/14 10:42 PM

Apparently I'm Phyllis Perry. This ... isn't good.

Emailed the website in absence of any other way to tell them about the major issue.

------
Kit
"Never underestimate the power of the right dress!" - drsue
"Hyu gots to know how to sveet tok de costumers, dollink" - Girl Genius, 11-24-08

j Renee Design
star
j Renee Design
Intermediate
WI
Member since 7/26/10
Posts: 627
online now
Send Message

      



Date: 4/12/14 10:47 PM

Yeesh. Hope they call someone in ASAP to deal with this problem. It sounds like Heartbleed has hit Vogue! :/

------
Jess
Sewing, Knitting, Living: http://www.sometimessewist.wordpress.com

2013 - Bought: 181, Used: 96, Stashed: 85
2014 - Carryover: 85, Bought: 76 1/8, Used: 85 3/4, Stashed: 76 3/8

Nancy1955
star
Nancy1955  Friend of PR
Beginner
USA
Member since 5/10/10
Posts: 272
Send Message

      



Date: 4/12/14 10:48 PM

I posted to their Facebook account. I strongly suggest that others do as well.

I had also emailed them when I discovered it.
-- Edited on 4/12/14 10:50 PM --

wendyrb
wendyrb  Friend of PR
Advanced
CA
Member since 12/30/11
Posts: 3189
Send Message

      



Date: 4/12/14 10:58 PM

This news makes me a little nervous as I placed an order today for the Club BMV sale. Having read the 1st post, I went to Vogue Patterns and on the top right it said Welcome (no name) and Log Out. This gives the impression that I was logged in (I wasn't), but did not identify me by my name or any name. I went to "My Account" and it came up blank for me to fill in- no ID. I hope others chime in with what they experience.

I just had an excellent customer service experience with McCalls- prompt and helpful. So let's see what they can do on this.

------
Always keep your words soft and sweet, just in case you have to eat them. Andy Rooney

Pfonzie- my honey Pfaff Creative Performance, Bernina 930 and 830, Evolution serger.

Nancy1955
star
Nancy1955  Friend of PR
Beginner
USA
Member since 5/10/10
Posts: 272
Send Message

      



In reply to wendyrb <<


Date: 4/12/14 11:02 PM

It looks like the issue started today at 11:42am - I am able to view orders placed on the web site since that time.
-- Edited on 4/12/14 11:06 PM --

wendyrb
wendyrb  Friend of PR
Advanced
CA
Member since 12/30/11
Posts: 3189
Send Message

      



In reply to Nancy1955 <<


Date: 4/12/14 11:17 PM

Please be looking for a PM from me. Thanks for your offer of help. Also, as a separate order, I renewed my Club BMV at 11:36 west coast time, so it too probably falls into the problematic time zone.

------
Always keep your words soft and sweet, just in case you have to eat them. Andy Rooney

Pfonzie- my honey Pfaff Creative Performance, Bernina 930 and 830, Evolution serger.

frame
star
frame
USA
Member since 2/19/04
Posts: 3281
Send Message

      



In reply to Nancy1955 <<
thumbsup 1 member likes this.


Date: 4/12/14 11:23 PM

I just went to the website and I was able to view someone's account. An account that wasn't mine. I could see all the orders, but they were all dated today even though I'm sure no one would place 20 orders in one day. I logged out and now I am just a guest.

I'm afraid to sign in and see what happens to my own account.

------
"framed" was taken
"I meant what I said, and I said what I meant." - Horton(Dr. Seuss)

jannw
starstarstarstar
jannw  Friend of PR
Intermediate
WA USA
Member since 9/3/06
Posts: 8552
Send Message

      



Date: 4/12/14 11:38 PM

I ordered two weeks ago and I just went to check....my first page of McCalls says "welcome Brenda" with an email address in Australia!

------
2009-113.25 yds
2010-115.5
2011-80.25+30+donated
2012 86.3 yds..
2013 21.0
Everyone who sews seriously has a stockpile of fabrics, because it is natural to purchase more than can be sewn in any one season" Singer, Timesaving Sewing, 1987

Go to Page:
Please LOGIN or Join PatternReview

printable version Printable Version

* Advertising and soliciting is strictly prohibited on PatternReview.com. If you find a post which is not in agreement with our Terms and Conditions, please click on the Report Post button to report it. Patterns and Notions >> Vogue Patterns Web Site

 
adv. search»
pattern | machine | member
        
The Contemporary Couture Jacket
The Contemporary Couture Jacket

Register

Sewing with Slippery & Drapey Fabrics
Sewing with Slippery & Drapey Fabrics

Register

Sew Chic Pretty Petticoat Pattern (ln1208)

Sew Chic Pretty Petticoat Pattern (ln1208)

Buy Now
Checkbook Cover

Checkbook Cover

Buy Now

Conditions of Use | Posting Guidelines | Privacy Policy | Shipping Rates | Returns & Refunds | Contact Us | About | New To PR | Advertising

Copyright © 2014 PatternReview.com® , OSATech, Inc. All rights reserved.