Reply to thread

Message

<blockquote data-quote="C. Baize" data-source="post: 1797396" data-attributes="member: 4571">So. I surfed over to DriveThruRPG to see what it looked like and everything... First time there.. I'm looking around a bit, and then something catches my eye... It says, &quot;Welcome back to DriveThruRPG.com, Nathaniel! May I tell you about the new products that we have added to our menu?If you have the most recent version of Adobe Reader, you can click here to activate your DRM account.&quot;You may have noted that I said it was my first time there, and then DTRPG tells me &quot;Welcome back&quot; and calls me by name .... err... Not by MY name, though... So, I'm curious... I hit the &quot;My Account&quot; button.... Lo and behold... I'm logged in as this Nathaniel guy. I can see his home address and phone number (nice one, Nathaniel! <img src="https://cdn.jsdelivr.net/joypixels/assets/8.0/png/unicode/64/1f642.png" class="smilie smilie--emoji" loading="lazy" width="64" height="64" alt=":)" title="Smile&nbsp; &nbsp; :)"&nbsp; data-smilie="1"data-shortname=":)" /> ) along with his e-mail address. I e-mailed Nathaniel and apprised him of the situation, and then I used the &quot;Contact Us&quot; feature at DTRPG and apprised them of the situation... I know these aren't instant fixes, however, and felt I should make people aware of the security issue found there. I might be able to see a mistake like that if there were some sort of cookie on my computer from having visited there, before, OR if we shared an ISP that used rotating IP addresses... We're all the way across the country from each other, using different ISPs.... Anyway... to anyone who uses DTRPG, be aware of the situation.</blockquote>

[QUOTE="C. Baize, post: 1797396, member: 4571"] So. I surfed over to DriveThruRPG to see what it looked like and everything... First time there.. I'm looking around a bit, and then something catches my eye... It says, "[i]Welcome back to DriveThruRPG.com, Nathaniel! May I tell you about the new products that we have added to our menu? If you have the most recent version of Adobe Reader, you can click here to activate your DRM account.[/i]" You may have noted that I said it was my first time there, and then DTRPG tells me "Welcome back" and calls me by name .... err... Not by [b][i][u]MY[/u][/i][/b][i][u][/u][/i][u][/u] name, though... So, I'm curious... I hit the "My Account" button.... Lo and behold... I'm logged in as this Nathaniel guy. I can see his home address and phone number (nice one, Nathaniel! :) ) along with his e-mail address. I e-mailed Nathaniel and apprised him of the situation, and then I used the "Contact Us" feature at DTRPG and apprised them of the situation... I know these aren't instant fixes, however, and felt I should make people aware of the security issue found there. I might be able to see a mistake like that if there were some sort of cookie on my computer from having visited there, before, OR if we shared an ISP that used rotating IP addresses... We're all the way across the country from each other, using different ISPs.... Anyway... to anyone who uses DTRPG, be aware of the situation. [/QUOTE]

Verification