SIGNUP - FREE Membership and 1 FREE Sewing Lesson
| FAQ | Login
 

Platinum Sponsor
Fabulous Fit
Fabulous Fit

Forum > Patterns and Notions > Vogue Patterns Web Site ( Moderated by Sharon1952)

Please LOGIN or Join PatternReview
Go to Page:
Vogue Patterns Web Site
MAJOR Security issue - was resolved!
Nancy1955
star
Nancy1955
USA
Member since 5/10/10
Posts: 279
Skill: Beginner
Send Message

      
thumbsup 1 member likes this.



Date: 4/12/14 10:25 PM

I decided to take a look at the Vogue patterns web site - I hadn't even logged in yet and at the top it right corner, it said Welcome Carol and I am able to access all information about a Carol Stoner including all her account information and the ability to change her password!
I emailed the web site to let them know about the issue.
I just refreshed their web page and now I'm able to view another account!

I am very concerned about my information stored on that web site.

In the past five minutes I've viewed over a dozen profiles and none of them are mine.

I can also view all order history for all orders placed over the last few minutes. ALL ORDERS.


-- Edited on 4/12/14 10:31 PM --

AdaH
star
AdaH
Iowa USA
Member since 11/21/09
Posts: 2500
Skill: Intermediate
Send Message

      



Date: 4/12/14 10:37 PM

That doesn't sound good.

------
Ada

KitnRose
star
KitnRose
Member since 6/18/03
Posts: 2126
Skill: Intermediate
Send Message

      



Date: 4/12/14 10:42 PM

Apparently I'm Phyllis Perry. This ... isn't good.

Emailed the website in absence of any other way to tell them about the major issue.

------
Kit
"Never underestimate the power of the right dress!" - drsue
"Hyu gots to know how to sveet tok de costumers, dollink" - Girl Genius, 11-24-08

j Renee Design
starstar
j Renee Design
Wisconsin USA
Member since 7/26/10
Posts: 877
Skill: Intermediate
Body Type:
Send Message

      



Date: 4/12/14 10:47 PM

Yeesh. Hope they call someone in ASAP to deal with this problem. It sounds like Heartbleed has hit Vogue! :/

------
Jess
Sewing, Knitting, Living: http://www.sometimessewist.wordpress.com

2013 - Bought: 181, Used: 96, Stashed: 85
2014 - B: 108, U: 132, S: 62 1/4
2015 - Carryover: 62 1/4, B: 23 3/8, U: 29 3/4, S: 55 7/8

Nancy1955
star
Nancy1955
USA
Member since 5/10/10
Posts: 279
Skill: Beginner
Send Message

      



Date: 4/12/14 10:48 PM

I posted to their Facebook account. I strongly suggest that others do as well.

I had also emailed them when I discovered it.
-- Edited on 4/12/14 10:50 PM --

wendyrb
wendyrb  Friend of PR
California USA
Member since 12/30/11
Posts: 3784
Skill: Advanced
Body Type:
Send Message

      



Date: 4/12/14 10:58 PM

This news makes me a little nervous as I placed an order today for the Club BMV sale. Having read the 1st post, I went to Vogue Patterns and on the top right it said Welcome (no name) and Log Out. This gives the impression that I was logged in (I wasn't), but did not identify me by my name or any name. I went to "My Account" and it came up blank for me to fill in- no ID. I hope others chime in with what they experience.

I just had an excellent customer service experience with McCalls- prompt and helpful. So let's see what they can do on this.

------
Always keep your words soft and sweet, just in case you have to eat them. Andy Rooney

Pfonzie- my honey Pfaff Creative Performance and Pfaff Passport, Bernina 930 and 830, Evolution and Enlighten sergers

Nancy1955
star
Nancy1955
USA
Member since 5/10/10
Posts: 279
Skill: Beginner
Send Message

      



In reply to wendyrb <<


Date: 4/12/14 11:02 PM

It looks like the issue started today at 11:42am - I am able to view orders placed on the web site since that time.
-- Edited on 4/12/14 11:06 PM --

wendyrb
wendyrb  Friend of PR
California USA
Member since 12/30/11
Posts: 3784
Skill: Advanced
Body Type:
Send Message

      



In reply to Nancy1955 <<


Date: 4/12/14 11:17 PM

Please be looking for a PM from me. Thanks for your offer of help. Also, as a separate order, I renewed my Club BMV at 11:36 west coast time, so it too probably falls into the problematic time zone.

------
Always keep your words soft and sweet, just in case you have to eat them. Andy Rooney

Pfonzie- my honey Pfaff Creative Performance and Pfaff Passport, Bernina 930 and 830, Evolution and Enlighten sergers

frame
star
frame
USA
Member since 2/19/04
Posts: 5343
Skill: Advanced
Send Message

      



In reply to Nancy1955 <<
thumbsup 1 member likes this.


Date: 4/12/14 11:23 PM

I just went to the website and I was able to view someone's account. An account that wasn't mine. I could see all the orders, but they were all dated today even though I'm sure no one would place 20 orders in one day. I logged out and now I am just a guest.

I'm afraid to sign in and see what happens to my own account.

------
"I meant what I said, and I said what I meant." - Horton(Dr. Seuss)

***When all else fails, call Tiffany.***

jannw
starstarstarstar
jannw
Washington USA
Member since 9/3/06
Posts: 8552
Skill: Intermediate
Send Message

      



Date: 4/12/14 11:38 PM

I ordered two weeks ago and I just went to check....my first page of McCalls says "welcome Brenda" with an email address in Australia!

------
2009-113.25 yds
2010-115.5
2011-80.25+30+donated
2012 86.3 yds..
2013 21.0
Everyone who sews seriously has a stockpile of fabrics, because it is natural to purchase more than can be sewn in any one season" Singer, Timesaving Sewing, 1987

Go to Page:
Please LOGIN or Join PatternReview

printable version Printable Version

* Advertising and soliciting is strictly prohibited on PatternReview.com. If you find a post which is not in agreement with our Terms and Conditions, please click on the Report Post button to report it. Patterns and Notions >> Vogue Patterns Web Site

 
adv. search»
pattern | machine | member
        
Online Class
Beginners Guide to Dyeing Fabrics
Beginners Guide to Dyeing Fabrics

Class Details

Online Class
Leather 101
Leather 101

Class Details

SewBaby Mitten Wraps and One Piece Hat Pattern

SewBaby Mitten Wraps and One Piece Hat Pattern

Pattern Details
SewBaby The Hat Shoppe Pattern

SewBaby The Hat Shoppe Pattern

Pattern Details

Conditions of Use | Posting Guidelines | Privacy Policy | Shipping Rates | Returns & Refunds | Contact Us | About | New To PR | Advertising

Copyright © 2015 PatternReview.com® , OSATech, Inc. All rights reserved.