Could criminals shop for free online?
A group of security researchers say they have found ways to trick online cashier systems into ordering items for free or at a discount.
Researchers from Indiana University and Microsoft Research found security holes in a software development kit from payment hosting provider Amazon Payments, Rui Wang, a Ph.D. student at Indiana University, told CNET in a recent interview. Amazon fixed the problems after being notified by the researchers, and integration bugs found in merchant shopping-cart applications and implementations on several retail sites have also been fixed.
The software they examined contained "logic flaws that can be exploited … Read more