Trump Mobile site leaks customer data as phone finally ships

https://image.theregister.com/254116.jpg?imageId=254116&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683

Techie claims Trump Mobile website was leaking thousands of people's data

Customers' info potentially handed to anyone who could send an HTTP request

The US President’s oft-maligned Trump Mobile venture may be facing another setback after a security buff claims he discovered a now-plugged website vulnerability that he says was leaking what could be tens of thousands of suckers' customers' details.

The individual behind the discovery, who goes by "Louis," says he's a self-taught tech tinkerer and described himself as "just a nerd between jobs with too much time on my hands." He reckons the website’s data could be scooped up with a simple POST request.

“It wasn't SQL. That wouldn't be as bad,” he told The Register. “It was a really simple HTTP request. POST, and then just asking for the info I wanted, basically.”

More than 27,000 people who ordered from Trump Mobile, the President’s all-American smartphone and...

Copyright of this story solely belongs to theregister.com. To see the full text click HERE

Read more