Author Topic: Veer Lapse in Security (Read 4887 times)

rimglow · « **on:** December 13, 2009, 15:31 »

I went to upload a photo on Veer, and was suddenly taken to another member's Homepage. My upload appeared on his Workspace, so I clicked on Put Back. But I also had access to all of his photos, settings, & secure information. Of course that meant that I no longer had access to my Homepage. So I decided to Sign out, and then Sign in again. Now everything seems to be back to normal. While I had access to the other member's info, I got his email address, and notified him of the problem. That was weird!

Digital66 · « **Reply #1 on:** December 13, 2009, 15:51 »

epantha · « **Reply #2 on:** December 13, 2009, 16:04 »

Yep, happened to me yesterday as well. Had just uploaded a few photos and wanted to check the keywords. Instead it went to a "Stephen's" workspace. I could see all his photos. I signed out and signed back in. A real problem, eh?

KB · « **Reply #3 on:** December 13, 2009, 17:10 »

Wow.

nruboc · « **Reply #4 on:** December 13, 2009, 18:30 »

Quote from: epantha on December 13, 2009, 16:04

Yep, happened to me yesterday as well. Had just uploaded a few photos and wanted to check the keywords. Instead it went to a "Stephen's" workspace. I could see all his photos. I signed out and signed back in. A real problem, eh?

Greaaaaat... I'm a Stephen, and for some reason, I have 475 available slots at Veer now, usually it's like 90 or so. Hopefully, these empty slots are not a result of someone deleting other ones from my portfolio (not implying you at all).

I would care more if my sales were better over there, but maybe the Veer guy can stop by and tell us what happened, and reassure me, my files were not deleted.

bittersweet · « **Reply #5 on:** December 13, 2009, 23:33 »

That is creepy. I seem to remember something similar happening at istock a while back.

Ivelin Radkov · « **Reply #6 on:** December 14, 2009, 07:26 »

Last two days when I log in I see some other photographer's account...

sharpshot · « **Reply #7 on:** December 14, 2009, 08:06 »

Have you all reported this to them? They don't seem to come here much anymore.

michey · « **Reply #8 on:** December 14, 2009, 09:16 »

i have same problem now, i m in another account and i can see his data.
Now where is my account?
This is a very serious bug and a serious site should close to fix it, i don t wanna other people see where i live, my phone an other stuff.

MikLav · « **Reply #9 on:** December 14, 2009, 10:09 »

they must have noticed something (or were notified

- the site is now down.

Brian O'Shea · « **Reply #10 on:** December 14, 2009, 12:21 »

Hi All -

Thanks for reporting these issues.
We're looking into this. We pulled the contributor side of Veer down earlier this morning in the meantime.

We'll post updates on here and on our twitter feed (@VeerMarketplace)

- Brian

Brian O'Shea · « **Reply #11 on:** December 14, 2009, 19:02 »

All of Veer.com and the Veer Marketplace contributor upload system is back online.

We pulled the entire site down for a few hours today so our developers could correct a bug that caused some users to experience issues with account sign-in. This has now been fixed. We take these issues very seriously.

Thanks for your patience.

- Brian

KB · « **Reply #12 on:** December 14, 2009, 19:24 »

And thanks for your prompt attention to the problem, Brian!

kentoh · « **Reply #13 on:** December 17, 2009, 03:17 »

I had exactly the same issue as yours going on for the past 2-3 months. I initially emailed veer support (abt 3 months ago) about this with snapshots of the other user's personal details/address, etc. They said it was fixed, but every now and then i still seem to end up in someone's else's accounts.

I just hope whoever is landing into my account, won't delete my entire port. Or i might be tempted to purchase the most expensive licenses from my port :p. I've also removed my personal address and details just in case.

Fingers crossed that this security flaw will finally be fixed for good

thaimacky · « **Reply #14 on:** December 27, 2009, 00:36 »

Quote from: Brian O'Shea on December 14, 2009, 19:02

All of Veer.com and the Veer Marketplace contributor upload system is back online.

We pulled the entire site down for a few hours today so our developers could correct a bug that caused some users to experience issues with account sign-in. This has now been fixed. We take these issues very seriously.

Thanks for your patience.

- Brian

...you seem to have a serious problem there, brian. i just wanted to become a contributor and created an account on veer:

1. i filled out the registration (username: "macky_ch")
2. i uploaded 1 picture in the menu "marketplace"
3. i didn't know where to upload a model release, so i clicked on the menu "photography"
4. as this wasn't the thing i was looking for, i clicked on "marketplace" again and.... I WAS LOGGED IN AS "Chan"!!! ok, chan's portfoglio is still empty. but i could see his address and his phone number.... :-(

so, no way i gonna upload on this site within the next few weeks (or maybe month) until veer really solved the problem!

brian, you should be more careful with your statements ("This has now been fixed. We take these issues very seriously.") after just having pulled the plug for a few hours a let your developers do some hocus pocus what obviously didn't work.

i would consider pulling the plug again and taking a little closer look...

apart from this: nice site - i hope you are able to get it right soon.
good luck
mac

anonymous · « **Reply #15 on:** December 27, 2009, 09:07 »

same here...still periodically logging into other accounts. Brian, is there a way to temporarily disable individual accounts until this is fixed...it's creeping me out?

MicrostockGroup Sponsors

Author Topic: Veer Lapse in Security (Read 4887 times)

rimglow

Digital66

epantha

KB

nruboc

bittersweet

Ivelin Radkov

sharpshot

michey

MikLav

Brian O'Shea

Brian O'Shea

KB

kentoh

thaimacky

anonymous

Related Topics

Sponsors

Microstock Poll Results

Sponsors