The only problem is, it has a little flaw. As first reported on Jackthewelshman’s blog, anyone can view and even delete other users’ messages. As you can see in his examples, all it takes is a slight change of the URL and you’re now viewing (or deleting) someone else’s private message.
Not that anyone is using this Midnight Delivery service to send extremely sensitive information, but as Jackthewelshman pointed out private pictures – pictures of people and their kids – were all visible to the public.
This is just the most-basic of issues one has to address when building a web application. Testing for access to resources without being logged-in, URI manipulation, etc. are all things even a small company has to deal with, let alone Facebook.
For such a high-profile, ‘featured service’ of theirs to have such a glaring flaw, begs the question, what else is being overlooked?
This week, Malwarebytes released v1.70 which brings with it a slightly updated look. The interface and program are still the same, but they’ve implemented their new logo/color palette throughout the application.
We just wanted to point this out so everyone running Malwarbytes’ Anti-Malware Pro knows MBAM is still running and protecting your system; it’s just no longer using the traditional red ‘M’ icon.
Everyone’s favorite image-mucker-upper, Instagram, just updated their Terms of Usage. This is a pretty important one, especially if you don’t want the pics you upload to be used in advertising by Instagram, or sold to 3rd parties.
Sorry folks, there’s just no such thing as best consignment software. You see the phrase “best consignment software” tossed around quite a bit, but it’s just to distract you – don’t let it distract you.
Consignment stores, are you looking for a way to let your consignors book a consignment appointment online? Google recently added an Appointments feature to Google Calendar. When you go to create a new Event, you will now see an Appointment slots option:
You can then publish this calendar online for free and consignors can schedule appointments online:
You can block-out appointment times and specify the length of each consignment appointment:
Once the appointment has been booked, the appointment time shows as booked online…
If you have a website, you can easily embed this calendar into a web page, or, just post a link to it on your Facebook page.
Google’s Appointment Scheduler offers consignment stores the following features:
Set specific time frames when consignment appointments are available.
Publish your calendar online for free, so consignors can schedule appointments online.
Set specific days and times when consignments are accepted.
Receive a notification when a consignor books an appointment.
Your consignors will have to have a Gmail account, which is free and many already utilize Gmail.