RE: CC Scams

[DeskJockey]

Hi i quit smoking 8 days ago via an ego and some wicked dk juice (uhg)
Anywho nothing special in this post besides a general explanation of why peoples cards are being stolen and how to protect yourself.
Quite a few vendors are using old outdated or just plain insecure shopping carts on there website heres a list (not complete) of some of the most easiest to exploit software's currently out they allow everything from price and inventory manipulation to full dumps of credit cards and user data bases. Scary...

What you can do to protect yourself
Step one : Use a dedicated online shopping prepayed card ( this also helps with impulse buys) and or use paypal when allowed to by site owners.
Step two : shop on sites you trust. (Nothing more you can really do its on the site owners to secure there shopping carts.)

What site owners can do.
Hire someone to take a look at your current security if your not overly technical minded or have any doubts and keep your software upgraded.

Heres the shortlist of carts that have HUGE secuity holes that alow everything from remote uploads to downloading your entire databases if you use this software you need to upgrade anything without a version number is currently exploitable and there are no security uptates that patch these holes. change carts now!

AJ Shopping Cart v1.0
Comersus 8 Shopping Cart
Valdersoft Shopping Cart
Interspire Shopping Cart
DevMass Shopping Cart
osCommerce and osCMax shopping cart
Multi-Vendor E-Commerce
XT-Commerce v1 Beta 1
Tochin Ecommerce
E-commerce Group
webperformance Ecommerce
Speedy-shop
ECShop
phpscripte24 Live Shopping Multi Portal System
GeneShop
ShopSystem
Online Shop
PhPepperShop Webshop
ShopCartDx
Shopxp v7.4
TomatoCart 1.0.1
After Shopping Cart
ZeusCart Ecommerce Shopping Cart Software
sX-Shop

This list is far from complete if you would like me to look at your site and notify you of any java injections or XSS holes ill gladly take a look for you. (hopefully this hasn't been covered here if so sorry for the wall of text.

 

[5cardstud]

Thanks I copied the list and am going to use it. I just opened an account for just online buying that has less than five bucks in it. Credit can't be used on it. I just transfer money to it when I make a purchase online.

 

[Liv2Ski]

good info and thanks

 

[juicefreak]

holy crap! i read this and went straight to my checking online and setup email alerts for any debit purchase over $50. my other online account emails me with every purchase made online immediately.

want to be protected with any online purchases, not just ecigs

 

[TexasT]

For a 'first thread and post" yours is especially informative and important.

Thanks for the information and I hope we hear a lot more from you in the future.

 

[Bob P.]

Welcome to ECF DeskJockey and congrats!
8 days, great, my wife and I are on day 11 and we're doing good.
Thanks for the CC info, I drove an hour and a half to NH to get my Joye 510 from a brick and mortar store just to avoid an online purchase.
I was going to get a prepaid card to use, but I didn't want to wait for shipping, lol, I wanted it and I wanted it NOW!
I'll end up getting a prepaid card to get juice and stuff.
Happy vaping!

 

[Scottitude]

Thanks, great info. Hope some of the suppliers people have suspected of having insecure transactions look closer at their potential security holes.