Slashdot Mirror
China's Smartphone Maker OnePlus Says Up To 40,000 Customers Were Affected by Credit Card Security Breach (theverge.com)
sqorbit writes: OnePlus, a manufacturer of an inexpensive smartphone meant to compete with the iPhone, states that data from 40,000 customers credit card information was stolen while purchasing phones from its website. Even as the company has just confirmed the breach, it says the the script stealing information had been running since November. It is not clear whether this was a remote attack or the attack happened from within the company. Credit purchases on the OnePlus site have been suspended and will remain that way while an investigation takes place. [...] Earlier this week, OnePlus had temporarily shut down credit card payments on its website following reports that customers' payment details were stolen after they bought goods through its online store. The company says it's disabling credit card payments "as a precaution," but will still be accepting purchases through PayPal. The investigation began after a poll posted by users on OnePlus' forums found that many customers had experienced the same problem.
They have 40,000 customers?
"Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
Claim : "Enjoy up to 50% off"
Reality : You'll get 7% off
Claim : "Download speeds of up to 150Mb"
Reality : You'll rarely get above 17Mb
Claim : "Up to 40,000 of our customers details may have been breached"
Reality : All 40,000 details were leaked.
Summation 2
Who is C. Hina and why is he so insecure?
And that, my friends, is why you don't go from a proven and tested e-commerce open source platform to a custom-written-by-cheap-labour one. Security by obscurity? More like failure by stupidity.