Re:$190M missing after crypto exchange Quadriga CEO dies
by tyingq on Saturday February 02, 2019 @04:07PM
(#19065720)
I remember a number of early e-commerce sites that put item prices in HTML forms. So craft your own POST, and name your own price.
Re:$190M missing after crypto exchange Quadriga CEO dies
by bouncycastle on Saturday February 02, 2019 @05:37PM
(#19066241)
Yes, seen this once before, where the shipping price was calculated client side, then sent to the server with no validation. You could craft a request with a negative value and get the price down to a cent for the entire cart!
At least in e-commerce, you can always send an email to the customer explaining the mistake, and cancel the order...
Re:$190M missing after crypto exchange Quadriga CEO dies
by mtmail on Saturday February 02, 2019 @04:50PM
(#19065957)
Recently seen the price listed/editable in the URL on a checkout form page.
Re:$190M missing after crypto exchange Quadriga CEO dies
by londons_explore on Saturday February 02, 2019 @05:07AM
(#19062185)
"top men"
Quote "BitGrail lost $170 million worth of Nano XRB tokens because... the checks for whether you had a sufficient balance to withdraw were only implemented as client-side JavaScript "