Access Micro Security ALERT (BUG FIXED) *read* Pls do no delete

[commOdog]

if what fordpower is saying, then that webmaster better lock his site down till he figures out whats up........

 

[Fallen Kell]

I just sent an email to ZDnet. Hopefully they might look into this story.

 

[Boogak]

Damn, this is nasty stuff. I had ordered a 40x cdrom drive for $7.50 (mispricing, I think) a long time ago from them but they never had it in stock. After a while, they just stopped stocking it but my order was never updated. It's just been sitting in my queue for the last 5 months. You would THINK they'd alert you about an order that hasn't been filled for a month, let alone 5 months, but these morons don't know what they're doing.

Thanks to this thread, I've changed all my account info (including the test Visa number). They need to get their act together.

 

[PG]

I had a similar thing happen to me with the VA website once. Somebody else's info was in my account along with mine. They never did figure it out. I just deleted the other guys info. What's interesting is the other guy's address was in the same town as VA. An employee?
I hope Access Micro fixes this fast. I have bought from them before and they should still have my info. Thanks for the warning.

 

[grass]

I removed my credit information at about 6:am this morning and logged out and kept on checking my status on my order with them also my e-mail just in case ,I ordered the ram yesterday!!!!my order wasn't shipped as of yet still pending .i also asked for the rebate of 10.00 dollars off ,and the five dollar drop in price by E-MAIL,since it dropped intwo hours of my purchase haven't heared anything yet!!!!

 

[neonitto]

given that they didnt update the palmIIIc for $238 for almost 18 hours, I figure it will be quite a while before they figure out what is going on with this.

be safe and change your CC info and monitor your bills

 

[fordpower7]

according to good ol alex, the problem is fixed, but god knows how many people saw my info and CC info............


Subj: RE: FW: Webpage problem.. Reveal my Credit Card Number!! VERY MA D!!!
Date: 10/19/2000 9:49:31 AM Pacific Daylight Time
From: alex@accessmicro.com (Alex Chen)
To: FORDPOWER7@aol.com ('FORDPOWER7@aol.com')

Dear Customer,
this probelm is fixed. Your CC has been deleted
Also you only had one order in your account.
Everything is in good order now
Best
:Q

 

[Wotok]

Looks like www.accessmicro.com has been taken down.

 

[gyoung]

I just orded something from them yesterday. Apparently their site is shut down. I get a

<< Forbidden >>

message when I go there.

I guess I should be scared. Maybe cancelling the card is in order.

 

[Trimper]

I also had a problem with Access Micro - For me it was the Link that I used to access the page. Check to make sure that you DO NOT USE the Link that was posted on the original forum - I did - and so did another collegue of mine -> the SID is the same in both, so the Computer will read the information you put in - due to the SID number. I will say that this not the best way of doing so. I had brought it to the attention of AccessMicro - who seemed surprised - duh?

I have used McGlen - and they did not seem to have the same problem. (they seem better - lifetime warranty &amp; cheaper shipping)

 

[bigbootydaddy]

i think office depot online had the same problem recently

 

[fordpower7]

yo check this out:

Subj: RE: FW: Webpage problem.. Reveal my Credit Card Number!! VERY MA D!!!
Date: 10/19/2000 12:40:01 PM Pacific Daylight Time
From: alex@accessmicro.com (Alex Chen)
To: FORDPOWER7@aol.com ('FORDPOWER7@aol.com')

Dear FORDPOWER7

We have found out the reason that is causing this. The source of the
problem came from Session ID
control. Apparently someone posted an url with session ID in it. We now
require SID to verify additional informations. We must apologize again for
the trouble that this has caused you. Be assure that we will help you
resolve and be responsible for any fault play with your card.

Sincerely
Webmaster


i hope that means not everyone's info was compromised... yo thanh did u ever post a URL for accessmicro on this site? cuz i think i used a link from somewhere on anandtech to get to accessmicro... oh and BTW did anyone call them? i was put on hold multiple times and then hung up on... they billed me for the ram already and have not shipped... QUITE disappointing...

 

[Namuna]

Reseller Ratings, possibly THE MOST important tool to every online consumer.

Right off the bat you know AccessMicro/McGlen is low ranked, which means USE CAUTION! I would NEVER electronically give people like this my CC#. Plus, using the phone with questionable people like this you can verify that they actually have the product you want.

This little fiasco situation is going to spread like wildfire. Likely to put a little fear in everybody about online buying. Even I, who's a seasoned veteran of online buying, have a twinge or paranoia now.

I've got a feeling the REAL issues isn't security, but rather a screwup on the side of whoever maintains their website. Too bad.


Linc.

 

[XL]

When I buy something from an online store I ALWAYS get the phone # and do it buy phone.

 

[50ftqueenie]

What bugs me the most about this situation is the fact that, according to CinderElmo, this security flaw could have been around since May. Now anyone who has ordered from these guys will need to go over their statments with a fine-toothed comb. You should STILL cancel your credit card. Who knows, months from now --after all of this has blown over-- someone still might try to use your credit card when you're not expecting it.

 

[JJordan]

Isn't the only information that shows up in your AccessMicro account information the last four digits of your CC ? I have not checked mine to see since I just read this thread, but that was my recollection.

 

[db]

We've had problems w/other sites when someone has given a link with a *session id*.

 

[greensled]

Everyone, I know I am new here, but I had to post this. I called the phone number on the original email and it belongs to an older gentleman named &quot;George&quot;, not anyone Vietnamese at all.

Be aware that rub4luv may indeed be alxnguyen, MasterOfEvil, and a host of other people.

Fatwallet post

Does anyone know what's going on with these people?

 

[Mday]

rub4luv, i'd recommend editting that first post, removing some personal information.

 

[Holycrap]

Rub:

Thanks for working to let everyone know about this problem. I respect your effort to be fair to accessmicro in your posting as well. I am sorry that someone has somehow confused your good deed and come up with the theory, mentioned above, that you bear some relation to someone else who seems to have some problems delivering product for which others seem to have paid.

Thanks for the heads up.

Holycrap!