Amazon's Data-Request Portal for Police is Visible on the Web (techcrunch.com) 6
"Anyone can access portions of a web portal used by law enforcement to request customer data from Amazon," reports TechCrunch, "even though the portal is supposed to require a verified email address and password..."
Only time sensitive emergency requests can be submitted without an account, but this requires the user to "declare and acknowledge" that they are an authorized law enforcement officer before they can submit a request.
The portal does not display customer data or allow access to existing law enforcement requests. But parts of the website still load without needing to log in, including its dashboard and the "standard" request form used by law enforcement to request customer data... Assuming this was a bug, we sent Amazon several emails prior to publication but did not hear back...
Motherboard reported a similar issue earlier this month that allowed anyone with an email address to access law enforcement portals set up by Facebook and WhatsApp.
The portal does not display customer data or allow access to existing law enforcement requests. But parts of the website still load without needing to log in, including its dashboard and the "standard" request form used by law enforcement to request customer data... Assuming this was a bug, we sent Amazon several emails prior to publication but did not hear back...
Motherboard reported a similar issue earlier this month that allowed anyone with an email address to access law enforcement portals set up by Facebook and WhatsApp.
tl;dr (Score:1)
https://www.whatsapp.com/recor... [whatsapp.com]
Sigh (Score:2)
Company makes website.
Website sucks.
The End.
it's just a test (Score:2)
I welcome you boys. I want you. (Score:1)
It's time to just admit (Score:2)
Total lack of interest of Slashdot crowd means? (Score:2)
Hmm... Wondering why I didn't notice this story earlier. Just about to expire on Slashdot, and it only stands out for the remarkably low total of 5 comments? Any story that mentions Amazon ought to be more interesting than that?
Something smells rotten in Slashdotistan.
Having said that, I'm not going to read it now because (1) My account on Amazon has been dormant for 20 years, (2) The article is expiring and therefore basically too moot to moot. (3) My interests and Slashdot's might be diverging anyway. I a