News for hackers. Stuff that matters.
Re:Magic by codygman on Sunday February 22, 2015 @05:33AM (#9088962)
Whoa, seriously? I'm going to guess you're joking since they probably implemented "customer order of amount x".
Re:Magic by jboggan on Sunday February 22, 2015 @12:34PM (#9090117)
Edit: they've fixed this now.

I'm not joking, click on it and try to pay. It shows an invoice of ($5,000), a.k.a. $5000 negative dollars. I didn't enter real payment information to see what happens next because of really idiotic interpretations of what constitutes "hacking", but it is a really bad design choice on their part that took me about half a second to find.

Founder, if you're reading this: was this an in-house build or did you outsource this?

Re:Magic by edmack on Sunday February 22, 2015 @11:45PM (#9092597)
The answer is probably they spent around two days building this before demand grew left them zero time to improve infrastructure. Which is more or less good.
Re:Magic by jboggan on Monday February 23, 2015 @12:38PM (#9095617)
Less good? Infrastructure breaking because of load is one thing (concurrency/DB issues) but nothing like this should ever be exposed to the user on general principle.