News for hackers. Stuff that matters.

A comment on Men's Wearhouse Perfect Fit App Vulnerability Exposing Customer Information. Parent comment

Re:Men's Wearhouse Perfect Fit App Vulnerability Exposing Cu... by rwestergren on Tuesday October 28, 2014 @07:45AM (#8520437)
I think the best solution is to not trust the client in assigning the perfectFitId. The login POST should be able to determine the perfectFitId for the user after login and maintain a session through oauth or other session management process.
[ Parent | on HN ]

There are no comments on this comment yet.