RANT: Vendor Websites - JKowners.com : Jeep Wrangler JK Forum
 
LinkBack Thread Tools Display Modes
post #1 of 16 Old 02-11-2011, 06:50 PM Thread Starter
JKO Addict!
 
binarypie's Avatar
 
Join Date: Aug 2010
Location: Driftwood, TX
Age: 36
Posts: 2,112
Garage
Feedback: 0 reviews
RANT: Vendor Websites

PLEASE PLEASE PLEASE PLEASE!!!

If you are selling something online and you ask me to create an account.

DO NOT EMAIL ME MY PASSWORD IN CLEAR TEXT!!!

Do you know what that generally means? It means my password is stored in clear text. If anyone gets access to your database they now have my password.

While I use different passwords for every website I visit. Some people do not.

When I see this happen. I will not buy anything from you. I wont even call you to place an order. I'll just assume you don't value my privacy or security.

If you can't keep something a simple as an online store secure I'd hate to see what your physical files look like.

Oh, and don't give me shit about "that's not their core business" ... I'm sorry. In this day in age there are tons of free (that's right $0.00) tools that will help you avoid pitfalls such as the one listed above.

On that note. If anyone here wants help correcting such a problem. I will offer free advice. I live and breathe this sort of stuff.

Info:

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
binarypie is offline  
Sponsored Links
Advertisement
 
post #2 of 16 Old 02-11-2011, 08:36 PM
Granite Guru
 
Join Date: Apr 2010
Location: Redmond, WA
Posts: 155
Feedback: 0 reviews

Actually that could be restated as:

DO NOT REQUIRE ME TO MAKE AN ACCOUNT TO BUY SOMETHING FROM YOU ONE TIME

Zombie Killer - 2010 Unlimited - Dark Charcoal Pearl
Follow my build
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
or check out my
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
X-caiver is offline  
post #3 of 16 Old 02-11-2011, 08:43 PM
Owner: TWF
 
406 YJ's Avatar
 
Join Date: Oct 2009
Location: Wichita, Kansas
Posts: 621
Feedback: 0 reviews

Who is this guided at?


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

TWF Double Beadlock wheels, Pitbull Tires Vendor, Raceline Wheels Vendor, Marsh Racing Wheels Vendor, Poison Spyder Vendor, Custom Splice Winch Rope Vendor, Cheap LED Light Bars
406 YJ is offline  
Sponsored Links
Advertisement
 
post #4 of 16 Old 02-11-2011, 08:44 PM
JKO Addict!
 
Mr.RonGilbert's Avatar
 
Join Date: Feb 2009
Location: Houston
Age: 48
Posts: 9,140
Garage
Feedback: 6 reviews

I think it is the shotgun approach....
Mr.RonGilbert is offline  
post #5 of 16 Old 02-11-2011, 08:50 PM
JKO Addict!
 
d'sjk's Avatar
 
Join Date: Aug 2009
Location: Atlanta, GA
Age: 37
Posts: 2,132
Garage
Feedback: 2 reviews

if it wasn't directed at a vendor here it would prob be in dirty laundry but given it is in the general discussion it sounds like he ran into this with a sponsor here.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.



To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

d'sjk is offline  
post #6 of 16 Old 02-11-2011, 09:35 PM Thread Starter
JKO Addict!
 
binarypie's Avatar
 
Join Date: Aug 2010
Location: Driftwood, TX
Age: 36
Posts: 2,112
Garage
Feedback: 0 reviews

Quote:
Originally Posted by d'sjk View Post
if it wasn't directed at a vendor here it would prob be in dirty laundry but given it is in the general discussion it sounds like he ran into this with a sponsor here.
I've seen this both sponsors and not.
I'd rather not name names.

I believe most of these errors are out of ignorance rather than laziness.

However, it has been my experience that when privately alerted to these problems most vendors simply shrug it off.

Info:

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
binarypie is offline  
post #7 of 16 Old 02-11-2011, 09:36 PM Thread Starter
JKO Addict!
 
binarypie's Avatar
 
Join Date: Aug 2010
Location: Driftwood, TX
Age: 36
Posts: 2,112
Garage
Feedback: 0 reviews

Quote:
Originally Posted by X-caiver View Post
Actually that could be restated as:

DO NOT REQUIRE ME TO MAKE AN ACCOUNT TO BUY SOMETHING FROM YOU ONE TIME
This is the best option.

Info:

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
binarypie is offline  
post #8 of 16 Old 02-11-2011, 09:43 PM
Slow and Low
 
Co4Lo's Avatar
 
Join Date: Jun 2009
Location: Colorado Springs
Age: 46
Posts: 5,305
Feedback: 4 reviews

I ordered my Racelines directly from Greg at Raceline.
He asked me to write my order on a piece of paper and fax it with my credit card info and everything on it.

Oddly enough, I felt ok doing it because who the fawk ever wasted their time trying to hack into a fax line...
Co4Lo is offline  
post #9 of 16 Old 02-12-2011, 05:26 AM
Rock God
 
Liquor's Avatar
 
Join Date: Sep 2009
Location: Wherever Uncle Sam Needs Me.
Posts: 1,054
Garage
Feedback: 1 reviews
Send a message via Skype™ to Liquor

you'd be surprised...

he is right though. ID theft is rappidly growing. it is easy and cheap to prevent on the seller and buyer side.

i don't mind the extra few seconds for a https page to load for a purchase.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
Your Jeep and Gaming Social Network
2012 Sponsors:
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

Magazine Feature:
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

Liquor is offline  
post #10 of 16 Old 02-12-2011, 07:08 PM
Rock God
 
BumpInTheRoad's Avatar
 
Join Date: Apr 2010
Posts: 1,694
Garage
Feedback: 7 reviews

Vendors:
  • NO, I do not want to create an account with you
  • NO, I will not give you my demographic information (if you force it I will leave)
  • NO, I do not want you to EVER store my payment information
  • NO, I do not want to receive advertisements or promotional messages
  • Coupons, significant discounts and free shit is okay, but only if the offer's valid for a reasonable period of time (like at least 2 weeks)
  • Yes, I check for SSL, and won't order without it.
  • Yes, I check for a reputable security seal, such as Verisign, Trustwave, McAfee, etc., and favor sites that utilize these services.
I use Virtual Account Numbers instead of my real credit card number for all my on-line purchases, even for subscriptions and repeat business. It's saved me a lot of hassle on a few occasions.

I'm a JKO Reject

Last edited by BumpInTheRoad; 02-12-2011 at 07:14 PM.
BumpInTheRoad is offline  
post #11 of 16 Old 02-13-2011, 09:12 AM
Owner: TWF
 
406 YJ's Avatar
 
Join Date: Oct 2009
Location: Wichita, Kansas
Posts: 621
Feedback: 0 reviews

If you don't want to order on line, pick up the phone and call in your order. Being the number one vendor on the worlds largest 4wd site I can telll you I have never had a customer say anything on this subject. We need your address to ship and your email to send tracking info


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

TWF Double Beadlock wheels, Pitbull Tires Vendor, Raceline Wheels Vendor, Marsh Racing Wheels Vendor, Poison Spyder Vendor, Custom Splice Winch Rope Vendor, Cheap LED Light Bars
406 YJ is offline  
post #12 of 16 Old 02-13-2011, 09:40 AM Thread Starter
JKO Addict!
 
binarypie's Avatar
 
Join Date: Aug 2010
Location: Driftwood, TX
Age: 36
Posts: 2,112
Garage
Feedback: 0 reviews

Quote:
Originally Posted by 406 YJ View Post
If you don't want to order on line, pick up the phone and call in your order. Being the number one vendor on the worlds largest 4wd site I can telll you I have never had a customer say anything on this subject. We need your address to ship and your email to send tracking info
There is a difference between needing that information and proper security.

The following is a general statement and not directed at anyone in particular.

I understand why online stores want customers to have accounts as it makes the entire experience easier when things go wrong or changes need to be made. Creating an account wont stop me from using a website.

What will stop me from using a website are amateur mistakes.
- SSL with lack of a verified cert
- My password better not be emailed to me
- If any of your profile boxes allow me to XSS your site.
- If after I create my account I have no way to edit/delete it without calling you.
- If your site uses phpMyAdmin and i can access simply by adding /phpMyAdmin to the end of your domain
- If your webserver tells me its running apache 1.x
- If your php header is public and it is running a version with known vulnerabilities.
- If your website feels/looks like it was created by your family member who "knows" about computers.

If you can't be bothered to spend the money/time to do things right.
I wont bother to spend my money with you. Even if you would save me money.

Info:

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
binarypie is offline  
post #13 of 16 Old 02-13-2011, 09:55 AM
JKO Addict!
 
BenFoo's Avatar
 
Join Date: Apr 2010
Location: Philadelphia, PA
Posts: 3,116
Garage
Feedback: 3 reviews

Quote:
Originally Posted by binarypie View Post
What will stop me from using a website are amateur mistakes.
- SSL with lack of a verified cert
- My password better not be emailed to me
- If any of your profile boxes allow me to XSS your site.
- If after I create my account I have no way to edit/delete it without calling you.
- If your site uses phpMyAdmin and i can access simply by adding /phpMyAdmin to the end of your domain
- If your webserver tells me its running apache 1.x
- If your php header is public and it is running a version with known vulnerabilities.
- If your website feels/looks like it was created by your family member who "knows" about computers.

If you can't be bothered to spend the money/time to do things right.
I wont bother to spend my money with you. Even if you would save me money.
^^^^^^^^^^^My guess is that most vendors have no idea what you're talking about here. ^^^^^^^^^^^^^^^

Perhaps link them a website that explains it? As writing on here to explain would take a lot of time and typing.

If you like a vendor but not their site, im sure you can just call them to order. Ordering over the phone has been around longer than the interwebz.
BenFoo is offline  
post #14 of 16 Old 02-13-2011, 12:00 PM
Granite Guru
 
Join Date: Apr 2010
Location: Redmond, WA
Posts: 155
Feedback: 0 reviews

Quote:
Originally Posted by 406 YJ View Post
We need your address to ship and your email to send tracking info
Yea, but there are thousands and thousands of sites that are able to successully mail me my products, and email me a receipt, without requiring me to 'make an account.'

It is absolutely possible to complete a transaction without requiring the customer to save their personal information and credit card behind a logon/password.

Any site that I expect only to make 1-2 purchases from that requires me to create an account gets my account information - which after purchase gets changed to have no credit card stored and other information set to match the company's customer service address

Zombie Killer - 2010 Unlimited - Dark Charcoal Pearl
Follow my build
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
or check out my
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
X-caiver is offline  
post #15 of 16 Old 02-13-2011, 12:05 PM
The Wheelin Man's Friend
 
RiverCityOffroad's Avatar
 
Join Date: Aug 2010
Location: Austin, TX
Posts: 8,649
Garage
Feedback: 60 reviews

I sent you a PM.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
RiverCityOffroad is offline  
post #16 of 16 Old 02-14-2011, 05:19 AM
JKowners Vendor
 
KrawlOff-Road.com's Avatar
 
Join Date: Oct 2010
Location: SC
Posts: 2,324
Feedback: 37 reviews

Quote:
Originally Posted by RiverCityOffroad View Post
I sent you a PM.
X2... We want all of our customers to feel safe and I am no computer wiz!

Oh, and you can order from our site without creating a account. Plus, you can order on here, via email, or over the phone!

-Jason


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
:

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
Phone: 864-437-8029
KrawlOff-Road.com is offline  
Sponsored Links
Advertisement
 
Reply

Quick Reply
Message:
Options

Register Now



In order to be able to post messages on the JKowners.com : Jeep Wrangler JK Forum forums, you must first register.
Please enter your desired user name, your email address and other required details in the form below.

User Name:
Password
Please enter a password for your user account. Note that passwords are case-sensitive.

Password:


Confirm Password:
Email Address
Please enter a valid email address for yourself.

Email Address:
OR

Log-in










Thread Tools
Show Printable Version Show Printable Version
Email this Page Email this Page
Display Modes
Linear Mode Linear Mode



Posting Rules  
You may post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

 
For the best viewing experience please update your browser to Google Chrome