Stories
Slash Boxes
Comments

SoylentNews is people

Ask SN: Best Way to Report a Major Security Problem at a Cellular Carrier?

posted by janrinok on Sunday July 19 2015, @07:58AM   Printer-friendly
from the good-luck-with-that dept.

An Anonymous Coward writes:

I tried to return an item to a nearby carrier-owned store, but they couldn't find my information. They never gave me a printed receipt and couldn't look it up with my phone number or name.

Now here's where it gets fishy: the clerk wanted to log into my e-mail account with the store's computer! When I told him I didn't have a web mail like GMail, etc, he asked another guy, who also said I should just log into it from there and find it.

I'm pretty sure I was giving deer-in-headlights looks while I was there. Flabbergasted is probably the word. Considering their "POS" system is based on Windows and has regular problems, this just seems tailor-made for keylogging, social engineering, or worse. I probably won't use my credit card there again.

So my question: how do I report this? Just calling customer care obviously won't cut it. I have a very hard time believing this is SOP, and that this is probably just this store--and where there's one, there are probably more.

Original Submission

 
This discussion has been archived. No new comments can be posted.
Ask SN: Best Way to Report a Major Security Problem at a Cellular Carrier? | Log In/Create an Account | Top | 24 comments | Search Discussion
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.

  • (Score: 2, Interesting) by Anonymous Coward on Sunday July 19 2015, @10:25AM

    by Anonymous Coward on Sunday July 19 2015, @10:25AM (#211006)

    That's probably not standard SOP. The standard SOP would be for you to go home and get the evidence that you bought the stuff.

    The bunch in the store were just trying to save you the trouble of doing that, and that's what they came up with.

    Expecting more from them is like expecting them to be licensed helicopter pilots. It's unlikely they would be working there if that were the case.

    So what really is it you want to report and why? That you're upset because you couldn't get what you want?

    Starting Score:    0  points
    Moderation   +2  
       Insightful=1, Interesting=1, Total=2
    Extra 'Interesting' Modifier   0  
    Total Score:   2  

  • (Score: 2, Insightful) by That_Dude on Sunday July 19 2015, @11:02AM

    by That_Dude (2503) on Sunday July 19 2015, @11:02AM (#211009)

    Good questions - the other side of the coin!

    Is this guy trying to turn in a hot phone?

    None the less, I wouldn't let someone else get anywhere near my e-mail much less on a store computer. If you do let them, depending on the e-mail provider, you might get an automatic e-mail saying that your account was logged into from that IP address.

    If the phone was purchased with a credit card - that's proof of a transaction especially if it provides the credibility of being from a similar store where an amount on a credit card bill more likely points to being your phone purchase.

    But, I don't get why - after claiming you didn't have web mail - they asked you to log in and find it.

    Something is missing - me needs more details.