Gold & Silver Forum

Gold & Silver Forum (http://goldismoney.info/forums/index.php)
-   Gold - Silver - Coins - Numismatics (http://goldismoney.info/forums/forumdisplay.php?f=51)
-   -   UHR order cancellation caused tracking system problems (http://goldismoney.info/forums/showthread.php?t=350456)

igorthesmall 02-18-2009 08:34 AM
UHR order cancellation caused tracking system problems
 
http://mintnewsblog.blogspot.com/200...-function.html


Wonder if this was the guy who was trying to flip his coin on Ebay and posted his order number and last name, lol.


Quote:
Several readers have posted comments wondering why the US Mint's online Track Order function has been unavailable for the past several days. The short answer is that this function is a serious security hole in the US Mint's website.

Mint News Blog readers who are members of Coin Network may already be aware of a situation that developed about a week ago. A Coin Network member named Tom had his Ultra High Relief Double Eagle order canceled by an unknown perpetrator. This action was performed using the US Mint's online Track Order function, which allows orders to be viewed and canceled by providing an order number and last name. His order number had been posted in the forum, and his last name had presumably been hunted down online.

I was honestly shocked and disappointed that something like this was possible, and even more so that someone had done it. I removed all other order numbers which users had posted on my sites and did what I could to rectify the situation.

I considered this to be a serious security flaw with the US Mint's website. Collectors often share their order numbers with others to estimate how many coins the US Mint is selling or to attempt to decipher the US Mint's shipping schedule. The US Mint has never indicated to customers that this number should be kept confidential, and last names increasing easy to discover online. Something more than these two bits of information should be required to cancel an order.

I sent an email to a contact at the US Mint to bring this to their attention. I also touched base with Susan Headley of About.com Coins. She had been aware of this issue for some time and had also reported it to the US Mint. With both of us expressing our concerns, they perhaps realized the seriousness of the issue and took the Track Order feature offline. (You can still call the US Mint by phone for an updated order status.)

Susan Headley describes the situation in detail on About.com Coins. She also discusses a separate US Mint issue related to shipping, which is currently in the spotlight.

Apocalypto 02-18-2009 10:54 AM
Re: UHR order cancellation caused tracking system problems
 
They should have required you open an account and enter a username and password, not just your order number and last name.

CoinNut 02-18-2009 11:17 AM
Re: UHR order cancellation caused tracking system problems
 
:banana:...Now he can go to the back of the line. Always the hand full of people that mess it up for most. :confused_ma: It has stopped me from viewing my order page,several X a day. This "problem" has been known for YEARS. Must do your own homework(DYODD). Pre-sales are full of problems. Best to sell/buy from in hand or in pipeline(mail) dealings.........BUT people only see...$$$$$$$.

MrRational 02-18-2009 11:35 AM
Re: UHR order cancellation caused tracking system problems
 
So in order to fix a security flaw that might affect a few people at most who are foolish enough to post their info on the internet, they shut down the whole tracking system that affects everyone. Nice.

HistoryStudent 02-18-2009 12:24 PM
Re: UHR order cancellation caused tracking system problems
 
Simple fix is to program the ORDER status area

UNDER a REDO login and password with (sadly) a security

NAME like your pet, mother's maiden, or something else.

PERHAPS.

Perhaps (bigger) they should just do their MISSION and provide the SUPPLY for the DEMAND like any well-run PRIVATE business. :thumb.aspx::111::111:

But that "ain't" possible with GOVERNMENT and common sense. :signs14::111:

HistoryStudent 02-18-2009 12:26 PM
Re: UHR order cancellation caused tracking system problems
 
Simple fix is to program the ORDER status area

UNDER a REDO login and password with (sadly) a security

NAME like your pet, mother's maiden, or something else.

PERHAPS.

Perhaps (bigger) they should just do their MISSION and provide the SUPPLY for the DEMAND like any well-run PRIVATE business. :thumb.aspx::111::111:

But that "ain't" possible with GOVERNMENT and common sense. :signs14::111:

We should be able to FIRE them with, say, 1000 COMPLAINTS.

Here's the first ONE! :111:

HistoryStudent 02-18-2009 12:27 PM
Re: UHR order cancellation caused tracking system problems
 
Quote:
Originally Posted by igorthesmall (Post 1577540)
http://mintnewsblog.blogspot.com/200...-function.html


Wonder if this was the guy who was trying to flip his coin on Ebay and posted his order number and last name, lol.
Thanks to both of you for the HEADS-UP.

:36_3_12:

tekhen 02-18-2009 12:54 PM
Re: UHR order cancellation caused tracking system problems
 
I won't blame this one on the mint...
One shouldn't have to 'sign up and then in' just to track their order...

The question is... why would this poor guy put his name and order information on-line? How many times over the years have we heard about identity theft?

There were some here who at the least put XXXX at the end of their number.
Oh well, I hope it was a lesson learned for this guy as now, we all suffer.

B.T.W. you can still call the Mint to track your order.


All times are GMT -4. The time now is 04:13 PM.

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.
Copyright = None use it and Link to GIM