Surfas Web Security
 

Ordered some stuff from www.surfasonline.com the other day. I was
disturbed to find that displaying my order status showed my CC# and
security code. I was also disturbed that the site stored a login
cookie without my permission, so that anyone on my computer could
access the site and see my order. Or change my account preferences.
Most sites will screen out all but the last 4 digits of your CC#. And
to change account information typically requires reentering your
password.

Just a heads up.

Surfas Web Security
 

"Greg Esres" > wrote in message
...
> Ordered some stuff from www.surfasonline.com the other day. I was
> disturbed to find that displaying my order status showed my CC# and
> security code. I was also disturbed that the site stored a login
> cookie without my permission, so that anyone on my computer could
> access the site and see my order. Or change my account preferences.
> Most sites will screen out all but the last 4 digits of your CC#. And
> to change account information typically requires reentering your
> password.
>
> Just a heads up.



Would it be safe to assume that you have contacted the company about these
issues, and followed up relentlessly until you got an answer you were
satisfied with?

Surfas Web Security
 

<<Would it be safe to assume that you have contacted the company about
these
issues, and followed up relentlessly until you got an answer you were
satisfied with? >>

I pointed out the issues to a customer service representative, but I'm
not sure he took my concerns seriously.

Surfas Web Security
 

"Greg Esres" > wrote in message
...
> <<Would it be safe to assume that you have contacted the company about
> these
> issues, and followed up relentlessly until you got an answer you were
> satisfied with? >>
>
> I pointed out the issues to a customer service representative, but I'm
> not sure he took my concerns seriously.
>


You probably need to talk to someone other than a customer service
representative, who knows as much about their web tech issues as I know
about designing cruise missile guidance systems: Absolutely nothing.

Surfas Web Security
 

<<Spammed a bunch of group either to promote the site or just out
of spite? >>

Do you think people are always motivated by selfish concerns? That
says something about you.

I discovered the company from references on this newsgroup and thought
people should know.

Surfas Web Security
 

<<You probably need to talk to someone other than a customer service
representative, who knows as much about their web tech issues as I
know
about designing cruise missile guidance systems: Absolutely nothing.
>>

I agree, but felt there were limits to how much work I should put into
solving a potential problem for them. There are many people to help
and so few hours in the day. :-) I urged the customer service rep to
forward my concerns to someone who was responsible for the web. If he
chooses not to do so, at least I provided them with the opportunity to
fix the problem.

Surfas Web Security
 

On Jan 11, 2:34 pm, Greg Esres > wrote:
> [snip]
> I discovered the company from references on this newsgroup and thought
> people should know.

I'm one of those who has favorably mentioned Surfa's. Good variety,
quality and prices on an amazing variety of kitchen/food stuff. I'm
within driving distance of it and can spend too much time browsing
through it, so I haven't ordered things from them online. Can't say
whether or not there is a security problem. I can say that if you're
ever near it, it's worth checking out. -aem

Surfas Web Security
 

On Fri, 11 Jan 2008 13:33:44 -0600, Sqwertz >
wrote:

>On Fri, 11 Jan 2008 19:09:51 GMT, JoeSpareBedroom wrote:
>
>> Would it be safe to assume that you have....
>
>Spammed a bunch of group either to promote the site or just out
>of spite?
>
>It might be kinda dead in here today, but it's still no reason to
>respond to it as you so frequently do.
>
>-sw

I doubt if this was spam. I have talked about Surfas before myself
here. It is an incredible restaurant supply store. I first heard
about it from Kay Hartman and Mimi Hiller here on this site. I
finally got there a few years ago, and now if I am anywhere near
Culver City (read 100 miles or so) I make it over there to see how to
spend my money on more kitchenware.

Christine

Surfas Web Security
 

On Sat, 12 Jan 2008 01:30:36 GMT, Sqwertz >
wrote:


>I had never heard of it and assumed it was just another one
>those, "Get revenge by posting it to 50,000 groups weekly" kinda
>things.

Ohmygawd, you have never heard some of us here in rfc moan in ectasy
about Surfas?

As I said, I first heard about it years ago, when Mimi Hiller and Kay
Hartman were regulars here. They did a post on going to Surfas one
day... It got me hooked.

If you do an advanced google search on rfc, and put in keywords Kay
Hartman and Surfas, you will get a lot of hits.

https://www.surfasonline.com/index.cfm

Christine