Blippy Exposes Credit Card Numbers Through Simple Google Search
An anonymous reader writes "In an unfortunate data breach, social media site Blippy has left credit card numbers in clear text, searchable via a simple Google query. The results show the amount spent on a transaction, the location, and the full card number. As of this submission, the issue still hasn't been resolved."
The company's co-founder, Philip Kaplan, told the NY Times, "... when people link their credit cards to Blippy, merchants pass along their raw transaction data – including some credit card numbers – and the site scrubs that information to present just the merchant and the dollar amount spent. But several months ago, when Blippy was being publicly tested, that raw transaction data was present in the site's HTML code, where it was retrieved by Google. Mr. Kaplan said that early on, Blippy started disguising the raw transaction data behind the scenes, but it did not know about the breach until today."
*browses to google, searches for full credit card number* No results. Whew!
You might try here
If you have nothing to hide, then why not?
/sarcasm (see NYT article)
God, this twit talk is growing on me. Cracks me up.
Fuck systemd. Fuck Redhat. Fuck Soylent, too. Wait, scratch the last one.
I wonder if this company is F-cked. If there was only a web site that would tell me that...
Google Checkout seems to have a few users...
Nerd rage is the funniest rage.
Well, duh! He's right there when I got the news! What in the hell would you expect me to do? Go out and find who actually did it and shoot THEM?
Geez, if I had that kind of patience I'd probably lose my American citizenship. Plus then I probably wouldn't be allowed to have a gun so I could shoot someone.
"This post contains words, known to the State of California to cause thought. Wash brain thoroughly after reading."
Normal logic? You mean "shoot the messenger"?
Google doesn't have a "messenger", that's MS & Yahoo you're thinking of. You must mean "shoot the search engine" ;-)
-- Off Topic --
Uh oh, I replied in the same topic (posted just above) as the person I stole the sig from. I didn't see your post until I had hit the submit button. That has to be like crossing the streams.
Don't think of it as a flame, more like an argument that does 3d6 fire damage.