Tire Rack Website Security Issue

[SabrToothSqrl]

So, some of you are tech people, and I'm also in the IT field, so I found this amusing, and obviously can't call them, but did email them about this. I'm sure they will brush me off. I don't have time to write a novel on why your website is broke. I don't think I've ever gotten any company to actually fix their site, even when it's so obviously broken.

If you go here:

Claims

A professional kit that comes with ready-to-use Material-UI© components developed with one common goal in mind, help you build faster & beautiful applications. Each component is fully customizable, responsive and easy to integrate.

trrclaims.nationsafedrivers.com

and enter any 'syntax correct data', you get lots of fun data back.

Every-time you submit the form, you get someone else's name, email, phone number, etc. I'm sure you can piece the data together.

Try John Doe, 555-555-1212, and [email protected].

Anyone else think this is not only not working, but a HUGE FREAKING BREACH of security and TRUST?!

 

[TristanVash38]

I created an account to revel in this with you (2011 Acura TSX V6 owner here)
*Me staring at the CompTIA CASP+ certification hanging on my wall*
{ CALL :returnValue = sp_nameparam1, aram2, aram3,) GET ANY; WE DON'T CARE ABOUT SECURITY }

Seriously just going back and forth presents different results this is abhorrently bad in all ways bad.

What's worse is you posted your SITREP on 21JUN2023. It's currently 11JUL2023 and this is still happening. Oh. My. God.

 

[SabrToothSqrl]

Apparently, it's fake data, just to piss you off. Because clearly it doesn't actually serve any real purpose. Even after you do get to login, it's one of the absolute worst websites in existence.

 

[TristanVash38]

So, some of you are tech people, and I'm also in the IT field, so I found this amusing, and obviously can't call them, but did email them about this. I'm sure they will brush me off. I don't have time to write a novel on why your website is broke. I don't think I've ever gotten any company to actually fix their site, even when it's so obviously broken.

If you go here:

Claims

A professional kit that comes with ready-to-use Material-UI© components developed with one common goal in mind, help you build faster & beautiful applications. Each component is fully customizable, responsive and easy to integrate.

trrclaims.nationsafedrivers.com

and enter any 'syntax correct data', you get lots of fun data back.

Every-time you submit the form, you get someone else's name, email, phone number, etc. I'm sure you can piece the data together.

Try John Doe, 555-555-1212, and [email protected].

Anyone else think this is not only not working, but a HUGE FREAKING BREACH of security and TRUST?!

Apparently, it's fake data, just to piss you off. Because clearly it doesn't actually serve any real purpose. Even after you do get to login, it's one of the absolute worst websites in existence.

I was able to confirm some actual people from the data presented; so more than likely was scraped data from a compiled advertisement list.

 

[TristanVash38]

I was able to confirm some actual people from the data presented; so more than likely was scraped data from a compiled advertisement list.