Izea Privacy Leak Plugged
In yesterday's article, I pointed out a privacy leak in Izea.com's support system that allowed anyone that clicked on their Contact Support link to view all other guest user's support tickets revealing usernames, passwords and real names associated with their Izea accounts. Five hours later, Peter Wright, Vice President of Izea.com left a comment explaining the issue and stated that they intend to fix the leak right away.
Peter Wright kept his word. As of today, the My Support link has been removed preventing anonymous users from clicking their way into your private data. You can now feel safe submitting a guest support ticket without your privacy being compromised.
Yesterday

Today
Peter Wright kept his word. As of today, the My Support link has been removed preventing anonymous users from clicking their way into your private data. You can now feel safe submitting a guest support ticket without your privacy being compromised.
Yesterday

Today


7 Comments:
5 hours later.. that's quite "right away"...
Have they ever mentioned what they are going to do about all the Pagerank losses? Realrank 1 never gave me any better opportunity :-(
Yikes! That is scary. Why did it take so long?
Wow, that's a bad leak. But it's a good thing it's now being fixed.
Always nice to see a company that reacts promptly to this stuff.
@linkylove Are you referring to Google's pagerank losses? Personally, I wouldn't worry about it unless you rely on it for advertisers.. It doesn't help your rankings in the search engines at all.
@cube I thought it was pretty quick, they fixed it the next day.
@craw Yeah it's definitely good. I'm happy with their quick response.
@cailean I agree, they are setting a good example by paying attention to what's being said about their company and fixing the problems promptly :D
I hate to burst the Izea bubble but that company says nothing but "work with us and your site is going to lose PR" I am staying away from them but great post.
Good thing it was caught.
Post a Comment
<< Home