WARNING: Sportsman's Guide

locobombero

locobombero

New member
Putting this here so that it will get plenty of attention.

Many here probably get these catalogs in the mail. So when I read this and tried it my self using random last names and my zip code, well just see for your self.

http://www.sportsmansguide.com/net/OrderStatus/OrderDisplayNew.aspx

Lets assume I were a bad guy looking for say......an AK47 all I would have to do is put a zip code and start running down the phone book until I find someone who bought an AK47 mag or accessory......Address and all!!!! Not good at all!

Im personally boycotting Sportsman's Guide until they get this fixed. Please send to anyone you know that may purchase from this site.

Locobombero
 
wow i didnt realize!!
i dont order from there much and its never alot but WOW
crazy that they would do something so irresponsible!
 
I have a friend across town that buys junk from them all the time. I entered his name and zip and got nothing. I entered generic names and zips and got nothing.
 
Quote:
I have a friend across town that buys junk from them all the time. I entered his name and zip and got nothing. I entered generic names and zips and got nothing.



I was able to find 4 hits for my zip code and common names in my area.
 
I've bought form them before but entered my name/zip and nothing!! /ubbthreads/images/graemlins/confused1.gif
 
Quote:
I've bought form them before but entered my name/zip and nothing!! /ubbthreads/images/graemlins/confused1.gif



It apparently shows orders placed in the last 120 days. Which I guess is better. I just dont like that it shows your full name and address. Person could even then do a phone number look up and use that info to do a credit card scheme.
 
I just sent this email to sportsman's guide:

Hello

I just wanted to bring to your attention a possible security flaw with your web site that was pointed out to me by a fellow hunter.

By going to this link:

http://www.sportsmansguide.com/net/OrderStatus/OrderDisplayNew.aspx

I or any one can put in a zip code and any last name found in the phone book and get the persons full name and address through this search. Here is 2 examples as to why I feel this is a risk to both you and your customers:

1. Lets assume I were a bad guy looking for say......an AK47 all I would have to do is put a zip code and start running down the phone book until I find someone who bought an AK47 mag or accessory......Address and all!!!!

2. "Hello Mr. Smith, we noticed you ordered a xxxxx from us. We were having a problem processing your credit card. Can you verify it ends in (insert random number) 2932. That's not it? That could be the problem. Let's start verifying your information is correct.

Your address is xxxxxxxx
The Item ordered was xxxxx
and your credit card number is:

Thank you sir, your UPS shipping number will be .... xxxxx

On behalf of sportsman's guide, Have a wonderful day,.

I truly hope you find this info helpful and motivating. I hope you take action immediately to protect both yourself and your customers.

Thank You
(My Real Name)
 
I typed in Johnson with my zip and got nothing then typed in Jones and got some info about a guy here. Address, name, and tracking number. A person could take the address and tracking number and take the goods off the persons porch before they even got home. Stupid feature.
 
I stopped ordering from them several years ago when the card I used was hacked and and several purchases were made on it, from them. I only used that card for online purchases and had only bought from them with it. So I do not buy from them anymore. period (there prices are not that great anyway and the stuff is all overrun or discontinued items or european surplus jusnk
 
I quit buying from them years ago due to what I thought was excessive shipping charges. Seems like the price is cheap, but the shipping is high so it winds up being the same price as anywhere else.
 
Quote:
I quit buying from them years ago due to what I thought was excessive shipping charges. Seems like the price is cheap, but the shipping is high so it winds up being the same price as anywhere else.




+1 /ubbthreads/images/graemlins/grinning-smiley-003.gif had the same problem. i will not deal with them /ubbthreads/images/graemlins/crazy.gif
 
I don't purchase anything from them but I was able to pull up somebodys order. I threw in a few common last names with local zips and found it. WHAT A BUNCH OF CRAP! The web site even stated there was a refund in progress. Somebody needs to fix that!
 
Wow. I know where I can get a size large black cold weather jacket on Monday. About a mile from my house.

This is the very irresponsible on their part to allow the public to see what someone has ordered and when it will arrive on the front porch. Even has the tracking number attached.

Geesh!
 
HOLY %^&*! /ubbthreads/images/graemlins/crazy.gif /ubbthreads/images/graemlins/crazy.gif /ubbthreads/images/graemlins/crazy.gif
Thank god I haven't ordered anything from them in quite a while!! Now I know I won't be anymore! /ubbthreads/images/graemlins/angry-smiley-055.gif
 
Nice to see they at least did something. Seems most companies today won't back their products or take responsibility for their actions/inactions. I've ordered from them in the past and probably will again someday if the deals are worth it to me.

peace.
unloaded
 


Write your reply...
Back
Top