Re:$190M missing after crypto exchange Quadriga CEO dies
by tyingq on Saturday February 02, 2019 @04:07PM
(#19065720)
I remember a number of early e-commerce sites that put item prices in HTML forms. So craft your own POST, and name your own price.
[ Parent
| on HN ]
Re:$190M missing after crypto exchange Quadriga CEO dies
by bouncycastle on Saturday February 02, 2019 @05:37PM
(#19066241)
Yes, seen this once before, where the shipping price was calculated client side, then sent to the server with no validation. You could craft a request with a negative value and get the price down to a cent for the entire cart!
At least in e-commerce, you can always send an email to the customer explaining the mistake, and cancel the order...