If you can read this, either the style sheet didn't load or you have an older browser that doesn't support style sheets. Try clearing your browser cache and refreshing the page.

(Wired) Fail Hey, I know, why not make it so that our customer's cellphone number is added into the request headers every time they browse a website on their phone?   (wired.co.uk) divider line 7
More: Fail, headers, SOPHOS, phone numbers, Lewis Peckover, security hole  
•       •       •

3885 clicks; posted to Geek » on 25 Jan 2012 at 9:44 AM   |  Favorite    |   share:  Share on Twitter share via Email Share on Facebook   more»   |    Get this fabulous T-Shirt and impress the methane out of your friends! shirt it!



7 Comments   (+0 »)
   
View Voting Results: Smartest and Funniest
 
Generation_D [TotalFark]
2012-01-25 08:45:31 AM
Remarkable that a large telco would just ignore privacy and use your information without consent. I hope O2 customers got compensated, like 5 free chats or something.
 
I_Am_Weasel [TotalFark]
2012-01-25 09:09:02 AM
Lewis Peckover. Now that's a name!
 
AbbeySomeone
2012-01-25 09:09:14 AM
I'm amazed that people are surprised by this type of thing.
 
sarah_t_s
2012-01-25 11:11:31 AM
This is probably going to be one of those things where someone, potentially, a middle manager with just enough technical knowledge to be dangerous, came up with the idea of having a button on their website which would initiate a support call.

Good idea. But you got to know which number to call right or even if it's a valid O2 phone right?

Yeah. Somewhere in O2 is a techie going "I farking told you that'd happen."
 
poot_rootbeer
2012-01-25 12:23:42 PM
Why the heck were they using phone number for a unique device identifier in the custom HTTP header, instead of something actually intended for that purpose like IMEI?
 
sarah_t_s
2012-01-25 12:49:40 PM
poot_rootbeer: Why the heck were they using phone number for a unique device identifier in the custom HTTP header, instead of something actually intended for that purpose like IMEI?

If we run with my scenario you will probably find the answer is that data protection covers IMEI in some way that'd make it more complex/expensive than blasting out a phone number to have a button on a website.
 
GroverCleveland
2012-01-25 07:55:13 PM
Amateurs! ... should have used Wireless Universal Resource FiLe (new window)
 
Displayed 7 of 7 comments

View Voting Results: Smartest and Funniest

Redisplay/refresh comments

This thread is closed to new comments.

Continue Farking
Submit a Link »
 


Link here