SIGNUP - FREE Membership and 1 FREE Sewing Lesson
| FAQ | Login
 

Forum > Patterns and Notions > Vogue Patterns Web Site ( Moderated by Sharon1952)

Please LOGIN or Join PatternReview
Go to Page:
Vogue Patterns Web Site
MAJOR Security issue - was resolved!
Nancy1955
star
Nancy1955  Friend of PR
Beginner
USA
Member since 5/10/10
Posts: 279
Send Message

      
thumbsup 1 member likes this.



Date: 4/12/14 10:25 PM

I decided to take a look at the Vogue patterns web site - I hadn't even logged in yet and at the top it right corner, it said Welcome Carol and I am able to access all information about a Carol Stoner including all her account information and the ability to change her password!
I emailed the web site to let them know about the issue.
I just refreshed their web page and now I'm able to view another account!

I am very concerned about my information stored on that web site.

In the past five minutes I've viewed over a dozen profiles and none of them are mine.

I can also view all order history for all orders placed over the last few minutes. ALL ORDERS.


-- Edited on 4/12/14 10:31 PM --

AdaH
star
AdaH  Friend of PR
Intermediate
Iowa USA
Member since 11/21/09
Posts: 2486
Send Message

      



Date: 4/12/14 10:37 PM

That doesn't sound good.

------
Ada

KitnRose
star
KitnRose
Intermediate
Member since 6/18/03
Posts: 2089
Send Message

      



Date: 4/12/14 10:42 PM

Apparently I'm Phyllis Perry. This ... isn't good.

Emailed the website in absence of any other way to tell them about the major issue.

------
Kit
"Never underestimate the power of the right dress!" - drsue
"Hyu gots to know how to sveet tok de costumers, dollink" - Girl Genius, 11-24-08

j Renee Design
star
j Renee Design
Intermediate
Wisconsin USA
Member since 7/26/10
Posts: 758
Send Message

      



Date: 4/12/14 10:47 PM

Yeesh. Hope they call someone in ASAP to deal with this problem. It sounds like Heartbleed has hit Vogue! :/

------
Jess
Sewing, Knitting, Living: http://www.sometimessewist.wordpress.com

2013 - Bought: 181, Used: 96, Stashed: 85
2014 - Carryover: 85, Bought: 98 1/8, Used: 126 3/8, Stashed: 57 3/4

Nancy1955
star
Nancy1955  Friend of PR
Beginner
USA
Member since 5/10/10
Posts: 279
Send Message

      



Date: 4/12/14 10:48 PM

I posted to their Facebook account. I strongly suggest that others do as well.

I had also emailed them when I discovered it.
-- Edited on 4/12/14 10:50 PM --

wendyrb
wendyrb  Friend of PR
Advanced
Member since 12/30/11
Posts: 3386
Send Message

      



Date: 4/12/14 10:58 PM

This news makes me a little nervous as I placed an order today for the Club BMV sale. Having read the 1st post, I went to Vogue Patterns and on the top right it said Welcome (no name) and Log Out. This gives the impression that I was logged in (I wasn't), but did not identify me by my name or any name. I went to "My Account" and it came up blank for me to fill in- no ID. I hope others chime in with what they experience.

I just had an excellent customer service experience with McCalls- prompt and helpful. So let's see what they can do on this.

------
Always keep your words soft and sweet, just in case you have to eat them. Andy Rooney

Pfonzie- my honey Pfaff Creative Performance, Bernina 930 and 830, Evolution serger.

Nancy1955
star
Nancy1955  Friend of PR
Beginner
USA
Member since 5/10/10
Posts: 279
Send Message

      



In reply to wendyrb <<


Date: 4/12/14 11:02 PM

It looks like the issue started today at 11:42am - I am able to view orders placed on the web site since that time.
-- Edited on 4/12/14 11:06 PM --

wendyrb
wendyrb  Friend of PR
Advanced
Member since 12/30/11
Posts: 3386
Send Message

      



In reply to Nancy1955 <<


Date: 4/12/14 11:17 PM

Please be looking for a PM from me. Thanks for your offer of help. Also, as a separate order, I renewed my Club BMV at 11:36 west coast time, so it too probably falls into the problematic time zone.

------
Always keep your words soft and sweet, just in case you have to eat them. Andy Rooney

Pfonzie- my honey Pfaff Creative Performance, Bernina 930 and 830, Evolution serger.

frame
star
frame
USA
Member since 2/19/04
Posts: 3973
Send Message

      



In reply to Nancy1955 <<
thumbsup 1 member likes this.


Date: 4/12/14 11:23 PM

I just went to the website and I was able to view someone's account. An account that wasn't mine. I could see all the orders, but they were all dated today even though I'm sure no one would place 20 orders in one day. I logged out and now I am just a guest.

I'm afraid to sign in and see what happens to my own account.

------
"framed" was taken
"I meant what I said, and I said what I meant." - Horton(Dr. Seuss)

jannw
starstarstarstar
jannw  Friend of PR
Intermediate
Washington USA
Member since 9/3/06
Posts: 8552
Send Message

      



Date: 4/12/14 11:38 PM

I ordered two weeks ago and I just went to check....my first page of McCalls says "welcome Brenda" with an email address in Australia!

------
2009-113.25 yds
2010-115.5
2011-80.25+30+donated
2012 86.3 yds..
2013 21.0
Everyone who sews seriously has a stockpile of fabrics, because it is natural to purchase more than can be sewn in any one season" Singer, Timesaving Sewing, 1987

Go to Page:
Please LOGIN or Join PatternReview

printable version Printable Version

* Advertising and soliciting is strictly prohibited on PatternReview.com. If you find a post which is not in agreement with our Terms and Conditions, please click on the Report Post button to report it. Patterns and Notions >> Vogue Patterns Web Site

Merchants on PR

Patterns from the Past


vintage sewing patterns
Deals!

Reconstructing History


Reconstructing History
Web site

Nature's Fabrics


Natural & Organic Fabrics
Deals!

Elliott Berman Textiles


Fabrics for Greater Ideas
Deals!

Style Arc sewing dress patterns


Patterns That Fit
Web site

 
adv. search»
pattern | machine | member
        
Leather 101
Leather 101

Register

All About Linings
All About Linings

Register

Vogue Patterns 8597

photo
by: wingamajig

Review
BurdaStyle Downloadable 6020

photo
by: tiffandrea

Review
Victory Hazel Paper Pattern

Victory Hazel Paper Pattern

Buy Now
SewBaby Easy Pieces Jumper Pattern

SewBaby Easy Pieces Jumper Pattern

Buy Now

Conditions of Use | Posting Guidelines | Privacy Policy | Shipping Rates | Returns & Refunds | Contact Us | About | New To PR | Advertising

Copyright © 2014 PatternReview.com® , OSATech, Inc. All rights reserved.