News for hackers. Stuff that matters.

redhawks2015

Saw that you were super active in this thread, so I googled your username. It looks like you're their competitor and you're acting like you're an unbiased/concerned person. Pretty dishonest - I'm sure it's great, but you should disclose that you're shilling for your company.
Well, there's not really any way someone could execute this attack. Receipts aren't logically grouped by reports based on someone's identity... They said it was part of an experiment and only included a small group of free users (if you're not paying, then YOU'RE the product) plus their employees.