Security Breech from Bill Goodwin- UPDATE IN POST #77

bcornell · #1 03-20-2020, 08:14 PM

Quote:

Originally Posted by NATCARD

I use Simple Auction Site for my auctions. I can see all of my customers User id's and passwords. Thanks, Jeff W (National Card Investors)

Thanks for confirming this, Jeff.

It is completely unacceptable for the SimpleAuctionSite and Barnebys.com (their parent company) to allow passwords to be stored in clear text and to allow auction site owners to optionally see them. It's not an oversight or "not a big deal". This is a complicit, lazy, unacceptable breach of data security.

The list of sports auctions sites using their software is long. You can easily check this by looking at the footer of any page on a site. If it shows the SimplyAuctionSite logo, you can assume that your username and password are NOT private.

If the excuse is "it wasn't malicious", then the answer is that it's incompetence. They can choose. Bob Freedman and SimplyAuctionSite, get this fixed tomorrow.

doug.goodman · #2 03-20-2020, 09:46 PM

Quote:

Originally Posted by bcornell

Thanks for confirming this, Jeff.

It is completely unacceptable for the SimpleAuctionSite and Barnebys.com (their parent company) to allow passwords to be stored in clear text and to allow auction site owners to optionally see them. It's not an oversight or "not a big deal". This is a complicit, lazy, unacceptable breach of data security.

The list of sports auctions sites using their software is long. You can easily check this by looking at the footer of any page on a site. If it shows the SimplyAuctionSite logo, you can assume that your username and password are NOT private.

If the excuse is "it wasn't malicious", then the answer is that it's incompetence. They can choose. Bob Freedman and SimplyAuctionSite, get this fixed tomorrow.

I agree.

RedsFan1941 · #3 03-20-2020, 09:50 PM

i am not expecting either bill Goodwin or bob freedman to come on the board and explain anything.

bcornell · #4 03-20-2020, 10:08 PM

Quote:

Originally Posted by RedsFan1941

i am not expecting either bill Goodwin or bob freedman to come on the board and explain anything.

Nope, Ronnie, they won't. That's why I contacted both directly, as well as Barnebys.com, the Swedish outfit that bought SimpleAuctionSite to let them know what they did wrong, why it's wrong, and how they have to fix it immediately.

I realize you think you're smarter than everyone else. That comes through in all your snarky, know-it-all posts. Some of them are even funny, although mostly they're just predictable and boring. Who are you, anyway?

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Has anyone been able to reach Bill Goodwin?	Blunder19	Net54baseball Vintage (WWII & Older) Baseball Cards & New Member Introductions	33	09-18-2013 03:29 PM
Chatted With Bill Goodwin Today	GregMitch34	Net54baseball Vintage (WWII & Older) Baseball Cards & New Member Introductions	42	06-09-2013 09:49 AM
Anyone speak or hear from bill goodwin in last 10 days???	forazzurri2axz	Net54baseball Vintage (WWII & Older) Baseball Cards & New Member Introductions	11	03-07-2011 08:05 PM
Special Thanks To Bill Goodwin	Archive	Net54baseball Vintage (WWII & Older) Baseball Cards & New Member Introductions	5	03-24-2009 07:32 AM
Bill Goodwin's e-mail addy please?	Archive	Net54baseball Vintage (WWII & Older) Baseball Cards & New Member Introductions	2	11-04-2007 10:11 PM