SIGNUP - FREE Membership and 1 FREE Sewing Lesson
| FAQ | Login
 

Platinum Sponsor
Fashion Fabrics Club
Fashion Fabrics Club

Forum > Patterns and Notions > Vogue Patterns Web Site ( Moderated by Sharon1952)

Please LOGIN or Join PatternReview
Go to Page:
Vogue Patterns Web Site
MAJOR Security issue - was resolved!
Nancy1955
star
Nancy1955  Friend of PR
Beginner
USA
Member since 5/10/10
Posts: 275
Send Message

      
thumbsup 1 member likes this.



Date: 4/12/14 10:25 PM

I decided to take a look at the Vogue patterns web site - I hadn't even logged in yet and at the top it right corner, it said Welcome Carol and I am able to access all information about a Carol Stoner including all her account information and the ability to change her password!
I emailed the web site to let them know about the issue.
I just refreshed their web page and now I'm able to view another account!

I am very concerned about my information stored on that web site.

In the past five minutes I've viewed over a dozen profiles and none of them are mine.

I can also view all order history for all orders placed over the last few minutes. ALL ORDERS.


-- Edited on 4/12/14 10:31 PM --

AdaH
star
AdaH  Friend of PR
Intermediate
Iowa USA
Member since 11/21/09
Posts: 2483
Send Message

      



Date: 4/12/14 10:37 PM

That doesn't sound good.

------
Ada

KitnRose
star
KitnRose
Intermediate
Texas USA
Member since 6/18/03
Posts: 2082
Send Message

      



Date: 4/12/14 10:42 PM

Apparently I'm Phyllis Perry. This ... isn't good.

Emailed the website in absence of any other way to tell them about the major issue.

------
Kit
"Never underestimate the power of the right dress!" - drsue
"Hyu gots to know how to sveet tok de costumers, dollink" - Girl Genius, 11-24-08

j Renee Design
star
j Renee Design
Intermediate
Wisconsin USA
Member since 7/26/10
Posts: 664
Send Message

      



Date: 4/12/14 10:47 PM

Yeesh. Hope they call someone in ASAP to deal with this problem. It sounds like Heartbleed has hit Vogue! :/

------
Jess
Sewing, Knitting, Living: http://www.sometimessewist.wordpress.com

2013 - Bought: 181, Used: 96, Stashed: 85
2014 - Carryover: 85, Bought: 76 1/8, Used: 85 3/4, Stashed: 76 3/8

Nancy1955
star
Nancy1955  Friend of PR
Beginner
USA
Member since 5/10/10
Posts: 275
Send Message

      



Date: 4/12/14 10:48 PM

I posted to their Facebook account. I strongly suggest that others do as well.

I had also emailed them when I discovered it.
-- Edited on 4/12/14 10:50 PM --

wendyrb
wendyrb  Friend of PR
Advanced
Member since 12/30/11
Posts: 3220
Send Message

      



Date: 4/12/14 10:58 PM

This news makes me a little nervous as I placed an order today for the Club BMV sale. Having read the 1st post, I went to Vogue Patterns and on the top right it said Welcome (no name) and Log Out. This gives the impression that I was logged in (I wasn't), but did not identify me by my name or any name. I went to "My Account" and it came up blank for me to fill in- no ID. I hope others chime in with what they experience.

I just had an excellent customer service experience with McCalls- prompt and helpful. So let's see what they can do on this.

------
Always keep your words soft and sweet, just in case you have to eat them. Andy Rooney

Pfonzie- my honey Pfaff Creative Performance, Bernina 930 and 830, Evolution serger.

Nancy1955
star
Nancy1955  Friend of PR
Beginner
USA
Member since 5/10/10
Posts: 275
Send Message

      



In reply to wendyrb <<


Date: 4/12/14 11:02 PM

It looks like the issue started today at 11:42am - I am able to view orders placed on the web site since that time.
-- Edited on 4/12/14 11:06 PM --

wendyrb
wendyrb  Friend of PR
Advanced
Member since 12/30/11
Posts: 3220
Send Message

      



In reply to Nancy1955 <<


Date: 4/12/14 11:17 PM

Please be looking for a PM from me. Thanks for your offer of help. Also, as a separate order, I renewed my Club BMV at 11:36 west coast time, so it too probably falls into the problematic time zone.

------
Always keep your words soft and sweet, just in case you have to eat them. Andy Rooney

Pfonzie- my honey Pfaff Creative Performance, Bernina 930 and 830, Evolution serger.

frame
star
frame
USA
Member since 2/19/04
Posts: 3389
Send Message

      



In reply to Nancy1955 <<
thumbsup 1 member likes this.


Date: 4/12/14 11:23 PM

I just went to the website and I was able to view someone's account. An account that wasn't mine. I could see all the orders, but they were all dated today even though I'm sure no one would place 20 orders in one day. I logged out and now I am just a guest.

I'm afraid to sign in and see what happens to my own account.

------
"framed" was taken
"I meant what I said, and I said what I meant." - Horton(Dr. Seuss)

jannw
starstarstarstar
jannw  Friend of PR
Intermediate
Washington USA
Member since 9/3/06
Posts: 8552
Send Message

      



Date: 4/12/14 11:38 PM

I ordered two weeks ago and I just went to check....my first page of McCalls says "welcome Brenda" with an email address in Australia!

------
2009-113.25 yds
2010-115.5
2011-80.25+30+donated
2012 86.3 yds..
2013 21.0
Everyone who sews seriously has a stockpile of fabrics, because it is natural to purchase more than can be sewn in any one season" Singer, Timesaving Sewing, 1987

Go to Page:
Please LOGIN or Join PatternReview

printable version Printable Version

* Advertising and soliciting is strictly prohibited on PatternReview.com. If you find a post which is not in agreement with our Terms and Conditions, please click on the Report Post button to report it. Patterns and Notions >> Vogue Patterns Web Site

 
adv. search»
pattern | machine | member
        
Clone Your Favorite Garment
Clone Your Favorite Garment

Register

Create a Jacket Muslin
Create a Jacket Muslin

Register

Deer&Doe Robe Sureau

photo
by: Kathhhhhy

Review
BurdaStyle Magazine 01-2012-155

photo
by: sewinfranc...

Review
Petite Plus 604 Pattern

Petite Plus 604 Pattern

Buy Now
Islander Sewing Systems Irish Coat Pattern Pattern

Islander Sewing Systems Irish Coat Pattern Pattern

Buy Now

Conditions of Use | Posting Guidelines | Privacy Policy | Shipping Rates | Returns & Refunds | Contact Us | About | New To PR | Advertising

Copyright © 2014 PatternReview.com® , OSATech, Inc. All rights reserved.