Access Micro Security ALERT (BUG FIXED) *read* Pls do no delete

rub4luv

Member
Oct 18, 2000
39
0
0
<= UpDATE.. BUG FIXED

First of, I would like to comment &quot;Good Job on Access Micro fixing the problem. When it come to stuff like this, it all comes down to good technical support. Alex Chen was very fast in response through email. He reply as soon as I emailed him. Thanx Alex Chen.&quot;
Reply to FordPower7: No I did not post a link here. I got to Access Micro from the link I found on this forum.

----- Original Message -----
From:
To: &quot;Alex Chen&quot; <alex@accessmicro.com>
Sent: Thursday, October 19, 2000 3:27 PM
Subject: My Mailing Address.... Thank You...


> Hi,
> Although, this 'was' a bad experience for me, i am very pleased with the
> way you guys handle this bug. All problem resolved in the nick of time as
> soon as you've received my email. I comment you on a job well done. You
> are a very good Web Administrator. Therefore, I will not hesistate to do
> business with Access Micro in the near future.
>
> And oh yeah, my mailing address is:
> *edited for my eye only*
>
> Thank You,
> T.N.
>
> ----- Original Message -----
> From: &quot;Alex Chen&quot; <alex@accessmicro.com>
> To:
> Sent: Thursday, October 19, 2000 2:14 PM
> Subject: RE: Webpage problem.. Reveal my Credit Card Number!! VERY MAD!!!
>
>
> > Dear Thanh
> >
> > We have found out the reason that is causing this. The source of the
> > problem came from Session ID
> > control. Apparently someone posted an url with session ID in it. We now
> > require SID to verify additional information. We must apologize again for
> > the trouble that this has caused you. Be assure that we will help you
> > resolve and be responsible for any fault play with your card. Also
> > we will like to offer you $100 for the trouble that we have caused you.
> >
> > Please contact me with your mailing address
> >
> > Sincerely
> > Webmaster
> >
> >
> >
______________________________________________________________

I ordered some ram from Access Micro today. Been a member of Access Micro for 2 hours and somebody already got my credit card information.

WTF is this? I'm very MAD!!! And they call it secure transaction? I've emailed them(accessmirco) about this and is going to attempt to cancel my credit card. This pisses me off because I have pending orders from other places and this is going to screw up all my orders.

Secure login? Yeah right!! They show all your credit card info if you logined. If you have access micro then just login to your account and click edit credit card info, you'll know what I mean. I went and deleted my credit card info as soon as I received this email, but during that time(before the email), hundreds of people could've seen my account. I'm going to call them(accessmicro) tomorrow. This suck!!

Regards,
T.N.

P.S. Sorry about the post. This is the only forum I read, plus it seem that this forum goto access micro the most, so that is why I posted this here.

----- Original Message -----
From: <FORDPOWER7@aol.com>
To: <rub4luv@ev1.net>
Sent: Wednesday, October 18, 2000 9:02 PM
Subject: yo Thanh i can access your access micro account dont delete this


> yo buddy i went to get some stuff from access micro today and when i went to
> log on it logged on as you and gave me all your information... someone could
> easily order stuff with your credit card and have it shipped to them... if u
> think im kidding heres all your info:
>
> Contact Information
> Name:
> Email:
> Phone:
>
> Shipping Information
> Name:
> Address: *Edit by rub4luv so info shall not be reveal*
> City State, Zip:
>
> Credit Card on file
> Credit Card Type DISCOVER
> Credit Card Number 7275 (Last 4 Digits)
> Expiration
> Name
>
>
> Billing Information
> Name
> Credit Card: DISCOVER xxxxxxxxxxxx7275
> Expiration:
>
> dont get screwed by other people... i would delete your account as soon as
> possible... please write me back so i know you got this letter, or else ill
> send another one... good luck!
>
> -simon
>
> :|

------------------------------------------------------------------
I want to be fair to accessmicro so.
Here is an update on contact with accessmicro.com...

----- Original Message -----
From: &quot;Alex Chen&quot; <alex@accessmicro.com>
To:
Sent: Wednesday, October 18, 2000 11:10 PM
Subject: RE: Webpage problem.. Reveal my Credit Card Number!! VERY
MAD!!!


> Dear Customer
> I have made sure that your credit card information is deleted. I
will try
> to contact the other gentlemen to find out how he accessed your
account.
I
> apologize the trouble that this has caused you
> If you have any question please email me at
> Achen@accessmicro.com <mailto:Achen@accessmicro.com>
>
> Best
> webmaster
>

<b>Here's a message after I told them that it was not the nice guy (fordpower7@aol.com) fault!!! Answering Navap question: He was just alerting me about this problem.</b>

----- Original Message -----
From: &quot;Alex Chen&quot; <alex@accessmicro.com>
To:
Sent: Wednesday, October 18, 2000 11:24 PM
Subject: RE: Webpage problem.. Reveal my Credit Card Number!! VERY MAD!!!


> Dear Customer
> I have contacted forpower7@aol.com <mailto:forpower7@aol.com> already. I
> will sort out this bug asap. I apologize any trouble this has caused you.
> Best
>
 

navap

Banned
Oct 11, 2000
140
0
0
Obviously, you are not kidding. SO, did you reply the guy and found out what he wanted?
 

Atomic

Member
Dec 30, 1999
33
0
0
Almost the same thing happened to me. After I put some ram in my basket and clicked to check out, it asked for my login. The login page came up with some guy's login name already on the page. I neglected it and went on with my business. I didn't buy, but I updated my cc info. That's pretty bad timing on my part. I hope no one got my info. Doh!!!
 

Vpham97

Senior member
Sep 15, 2000
477
0
0
This could effect many peoples, b/c us Anadtecher have been ordering many differen stuff from them lately.
 

wkc

Member
Jun 7, 2000
57
0
0
I am stunned to learn about this, for that's exactly what happened to me just a few days ago. I ordered a 128mg ram stick from McGlen (owns or owned by AccessMicro) and on the same day of my order, three illegitimate requests for authorization were made on my credit card. Luckily, my CC company caught that and called me. We cancelled the card immediately. Will never order anything from them again, hot deal or not.
 

w3b

Golden Member
Apr 23, 2000
1,089
0
0
must be a server glitch... let's remove all credit card info from our accounts, shall we? :)

bump for important issue
 

SLEEPER5555

Golden Member
Aug 16, 2000
1,597
0
0
a visa test card # is 4 and fifteen 1's any expiration date will work!

I don't think this applied to mcglen.com, I did order the palm III and i just went to the site and checked and my info is not exposed! At least i hope it is safe!
 

commOdog

Golden Member
Oct 9, 1999
1,687
0
0
thanks for the generic card www4ASearchcom, i just updated my account to no info at anystreet usa.......with the generic card #
 

commOdog

Golden Member
Oct 9, 1999
1,687
0
0
hey rub4luv, your name looks very familiar (Thanh Nguyen), i think i sold you some star wars stuff a long ass time ago???????
or sumthin, i remember your name from something..........
hmmmmm
 

starlitt

Senior member
Oct 24, 1999
223
0
0
We've been through this before with http://www.explorermicro.com
but not the same issue. Checking card was fraudly used to purchase a computer and some other thing. We contacted this company and had NO response from them!!! So finally we went to BBB.com (we also rated them with bizrate.com and other business rate sites) and finally got a response through BBB.com
We were upset because Explorermicro.com did not attempt to contact us about our questions and concerns.

rub4luv- you are so lucky that someone notify you about your information being logged at accessmirco.com

 

fordpower7

Junior Member
Oct 19, 2000
12
0
0
hey whats up all... i go to this site every day for the fattiest deals and i thought since i started all this ruckus i might as well join the forum and explain what happened (even though anandtech banned my normal email address for some reason (fordpower7@aol.com)... wtf)...

i signed on to check out how my $69 (now $64) 128mb ram was coming and as soon as i logged into their secure server i was signed on as Thanh. at first i didnt realize it, then i noticed that it didnt even ask for a password or a login name, it just logged me in as him- i basically did a fat nothing, which was scary...
assuming others could get to this guys account, i emailed him with the preceding letter, trying to make the subject line as explicit as possible... i thought nothing more of it until i went to good ol anandtech and saw this post... damn! i would recommend everyone delete their CC info as soon as possible... and just a note i noticed that even if someone COULD have gotten ahold of your card info and changed the mailing address, the email section of the profile cannot be changed, and so an email receipt would be sent to the CC owner with the transactions contents... oh and can i re emphasize the DELETION OF YOUR CREDIT CARD INFO?!?!?! I GOT AN EMAIL FROM THE WEBMASTER AND HE DOESENT KNOW WHAT THE HELL IS GOING ON:

Subj: FW: Webpage problem.. Reveal my Credit Card Number!! VERY MAD!!!
Date: 10/18/2000 9:17:38 PM Pacific Daylight Time
From: alex@accessmicro.com (Alex Chen)
To: fordpower7@aol.com ('fordpower7@aol.com')

Dear customer
Can you help me figure out if there is a problem on the web site? How were
you able to login as different person? Did you share the computer with
Thanh?
Was this a public computer?
webmaster

i think its logging people on as the previous person who input their password, since i live thousands of miles away from thanh, and could get his info... so check yer email and hope for no &quot;new&quot; orders...still, check with your CC company and delete that card...
 

rebuilder

Senior member
Jan 30, 2000
682
0
0
Has anyone contacted Cnet or any other news agencies so that others could be alerted to this problem?
 

huesmann

Diamond Member
Dec 7, 1999
8,618
0
76
fordpower, if i'm not mistaken, anandforums banned aol email addresses, so that's why your old address won't work?
 

io331

Member
May 15, 2000
126
0
0
American Express Private Payments or the Cobalt Card are they way to go any more... Never more than you are trying to spend is out there...
 

CinderElmo

Senior member
Jun 23, 2000
732
0
0



<< I ordered a 128mg ram stick from McGlen (owns or owned by AccessMicro) and on the same day of my order, three illegitimate requests for authorization were made on my credit card >>



I entered my cc # and ordered something from Mcglen back in May 2000, and almost the same day (if I am reading the order # of Mcglen to mean the date of purchase???) my CC # was used to sign up for a subscription porn site (39.95/mo). The crapper of it was, my CC statement had some cryptic listing as to what was being purchased (it didn't say PORN SITE SUBSCRIPTION) on the CC statement! When you buy as much as I do with my only CC, it took 4 months for me to notice this recurring charge!!!

Check your statements!!!

By the way, I was only able to get 2 months refunded so those ba$tards stole 80 bucks from me. I have been using my CC online for years and this was the FIRST time this has ever happened.

 

VH2000

Senior member
Feb 8, 2000
431
0
0
THANK YOU FOR THE INFO!

I JUST NOTICED THIS THREAD - I HAD ANOTHER WINDOW OPEN AND I WAS AT THE ACCESS MICRO CHECKOUT SCREEN!
THANK GOD I DIDN'T ENTER ANY INFO!

THAT WAS CLOSE!

THANKS AGAIN!!!!!