I found a flaw in the Apple Store page and they fixed it without saying “Thanks”

Posted by atanasb on Sunday February 15, 2015 @10:21AM
from the bozhkoff.com dept.

( 4 comments | 7 points | on HN )

Re:I found a flaw in the Apple Store page and they fixed it ... by lettergram on Sunday February 15, 2015 @10:38AM (#9052865)

It may have been a flaw, but it wasn't a security issue.

Further, the email starts off with,

"Thank you for contacting the Apple Product Security team."

[ Parent | on HN ]

Re:I found a flaw in the Apple Store page and they fixed it ... by kungpoo on Sunday February 15, 2015 @10:41AM (#9052872)

How is this a security flaw?

[ Parent | on HN ]

Re:I found a flaw in the Apple Store page and they fixed it ... by xtrumanx on Sunday February 15, 2015 @10:56AM (#9052921)

This is seems to be a case of "Missing Function Level Access Control"[0] as defined by the Open Web Application Security Project (OWASP).

I highly suggest browsing OWASP's Top 10[1] if you are a software developer and believe this is not a security vulnerability.

[ Parent | on HN ]

Re:I found a flaw in the Apple Store page and they fixed it ... by momofuuku on Sunday February 15, 2015 @10:36AM (#9052860)

No offense but no you didn't, this is internet garbage thanks don't post anymore

[ Parent | on HN ]