News for hackers. Stuff that matters.

A comment on Ignoring the amount customers confirm is no security bug according to PayPal. Parent comment

Re:Ignoring the amount customers confirm is no security bug ... by marze on Saturday July 19, 2014 @11:35AM (#8057734)
Of course it is a bug. Proper behavior would be to confirm the amount plus shipping, or at very least, limit the change to an amount no greater than $20 more than what was confirmed.
[ Parent | on HN ]

There are no comments on this comment yet.