Sears Exposes Customer Purchase History in Violation of Its Privacy Policy

Benjamin Edelman has more bad news regarding Sears’s appalling online privacy standards:

Sears offers no security whatsoever to prevent a ManageMyHome user from retrieving another person’s purchase history by entering that person’s name, phone number, and address.

★ Friday, 4 January 2008