SIGNUP - FREE Membership and 1 FREE Sewing Lesson
| FAQ | Login
 

Platinum Sponsor
PatternReview.com
PatternReview.com

Forum > Patterns and Notions > Vogue Patterns Web Site ( Moderated by Sharon1952)

Please LOGIN or Join PatternReview
Go to Page:
Vogue Patterns Web Site
MAJOR Security issue - was resolved!
Nancy1955
star
Nancy1955  Friend of PR
Beginner
USA
Member since 5/10/10
Posts: 278
Send Message

      
thumbsup 1 member likes this.



Date: 4/12/14 10:25 PM

I decided to take a look at the Vogue patterns web site - I hadn't even logged in yet and at the top it right corner, it said Welcome Carol and I am able to access all information about a Carol Stoner including all her account information and the ability to change her password!
I emailed the web site to let them know about the issue.
I just refreshed their web page and now I'm able to view another account!

I am very concerned about my information stored on that web site.

In the past five minutes I've viewed over a dozen profiles and none of them are mine.

I can also view all order history for all orders placed over the last few minutes. ALL ORDERS.


-- Edited on 4/12/14 10:31 PM --

AdaH
star
AdaH  Friend of PR
Intermediate
Iowa USA
Member since 11/21/09
Posts: 2483
Send Message

      



Date: 4/12/14 10:37 PM

That doesn't sound good.

------
Ada

KitnRose
star
KitnRose
Intermediate
Member since 6/18/03
Posts: 2086
Send Message

      



Date: 4/12/14 10:42 PM

Apparently I'm Phyllis Perry. This ... isn't good.

Emailed the website in absence of any other way to tell them about the major issue.

------
Kit
"Never underestimate the power of the right dress!" - drsue
"Hyu gots to know how to sveet tok de costumers, dollink" - Girl Genius, 11-24-08

j Renee Design
star
j Renee Design
Intermediate
Wisconsin USA
Member since 7/26/10
Posts: 681
Send Message

      



Date: 4/12/14 10:47 PM

Yeesh. Hope they call someone in ASAP to deal with this problem. It sounds like Heartbleed has hit Vogue! :/

------
Jess
Sewing, Knitting, Living: http://www.sometimessewist.wordpress.com

2013 - Bought: 181, Used: 96, Stashed: 85
2014 - Carryover: 85, Bought: 88 1/8, Used: 96 3/8, Stashed: 77 3/4

Nancy1955
star
Nancy1955  Friend of PR
Beginner
USA
Member since 5/10/10
Posts: 278
Send Message

      



Date: 4/12/14 10:48 PM

I posted to their Facebook account. I strongly suggest that others do as well.

I had also emailed them when I discovered it.
-- Edited on 4/12/14 10:50 PM --

wendyrb
wendyrb  Friend of PR
Advanced
Member since 12/30/11
Posts: 3244
Send Message

      



Date: 4/12/14 10:58 PM

This news makes me a little nervous as I placed an order today for the Club BMV sale. Having read the 1st post, I went to Vogue Patterns and on the top right it said Welcome (no name) and Log Out. This gives the impression that I was logged in (I wasn't), but did not identify me by my name or any name. I went to "My Account" and it came up blank for me to fill in- no ID. I hope others chime in with what they experience.

I just had an excellent customer service experience with McCalls- prompt and helpful. So let's see what they can do on this.

------
Always keep your words soft and sweet, just in case you have to eat them. Andy Rooney

Pfonzie- my honey Pfaff Creative Performance, Bernina 930 and 830, Evolution serger.

Nancy1955
star
Nancy1955  Friend of PR
Beginner
USA
Member since 5/10/10
Posts: 278
Send Message

      



In reply to wendyrb <<


Date: 4/12/14 11:02 PM

It looks like the issue started today at 11:42am - I am able to view orders placed on the web site since that time.
-- Edited on 4/12/14 11:06 PM --

wendyrb
wendyrb  Friend of PR
Advanced
Member since 12/30/11
Posts: 3244
Send Message

      



In reply to Nancy1955 <<


Date: 4/12/14 11:17 PM

Please be looking for a PM from me. Thanks for your offer of help. Also, as a separate order, I renewed my Club BMV at 11:36 west coast time, so it too probably falls into the problematic time zone.

------
Always keep your words soft and sweet, just in case you have to eat them. Andy Rooney

Pfonzie- my honey Pfaff Creative Performance, Bernina 930 and 830, Evolution serger.

frame
star
frame
USA
Member since 2/19/04
Posts: 3514
Send Message

      



In reply to Nancy1955 <<
thumbsup 1 member likes this.


Date: 4/12/14 11:23 PM

I just went to the website and I was able to view someone's account. An account that wasn't mine. I could see all the orders, but they were all dated today even though I'm sure no one would place 20 orders in one day. I logged out and now I am just a guest.

I'm afraid to sign in and see what happens to my own account.

------
"framed" was taken
"I meant what I said, and I said what I meant." - Horton(Dr. Seuss)

jannw
starstarstarstar
jannw  Friend of PR
Intermediate
Washington USA
Member since 9/3/06
Posts: 8552
Send Message

      



Date: 4/12/14 11:38 PM

I ordered two weeks ago and I just went to check....my first page of McCalls says "welcome Brenda" with an email address in Australia!

------
2009-113.25 yds
2010-115.5
2011-80.25+30+donated
2012 86.3 yds..
2013 21.0
Everyone who sews seriously has a stockpile of fabrics, because it is natural to purchase more than can be sewn in any one season" Singer, Timesaving Sewing, 1987

Go to Page:
Please LOGIN or Join PatternReview

printable version Printable Version

* Advertising and soliciting is strictly prohibited on PatternReview.com. If you find a post which is not in agreement with our Terms and Conditions, please click on the Report Post button to report it. Patterns and Notions >> Vogue Patterns Web Site

Merchants on PR

Patterns from the Past


vintage sewing patterns
Deals!

Reconstructing History


Reconstructing History
Web site

Elliott Berman Textiles


Fabrics for Greater Ideas
Deals!

Gwyn Hug


Fabric Shopping Help!
Deals!

Lanetzliving Vintage Sewing Patterns


Vintage Sewing Patterns
Deals!

 
adv. search»
pattern | machine | member
        
Sewing Facings and Developing Facing Patterns
Sewing Facings and Developing Facing Patterns

Register

Fun with Fitting - BODICE w Darts
Fun with Fitting - BODICE w Darts

Register

MariaDenmark 101

photo
by: cindysewsa...

Review
Making Patterns from Existing Garments - A CD book by Kenneth King

Making Patterns from Existing Garments - A CD book by Kenneth King

Buy Now
Stitch 'n' Flip Jacket Construction - A downloadable Book by Shannon Gifford

Stitch 'n' Flip Jacket Construction  - A downloadable Book by Shannon Gifford

Buy Now
McCall's 6599

photo
by: ElizabethK

Review

Conditions of Use | Posting Guidelines | Privacy Policy | Shipping Rates | Returns & Refunds | Contact Us | About | New To PR | Advertising

Copyright © 2014 PatternReview.com® , OSATech, Inc. All rights reserved.