Groupon subsidiary leaks 300K logins, fixes fail, fails again !!!!!

[INDRANIL]

Digital discount site Groupon is well known in the USA, but operates through subsidiaries in other parts of the world. The company recently acquired Indian digital discount operator SoSasta, which operates a separate India-specific website under the SoSasta name.

If you're not familiar with the idea, you bid via the site to buy discounted items: mail-order underwear in St John's, Canada, for example; or a meal at the Hilton Hotel in New Delhi, India.

Once a minimum quota of bids is reached, all bidders get charged at the discounted price.

Of course, bidding via the site means that you need an account with the site, which means a username and password. That means the site needs an authentication system.

Searching on SoSasta's site, Grzelak didn't just find database schemas or other information which might aid a break-in. He recovered a database of users, login names and cleartext passwords - 300,000 of them - straight into his browser.

(Actually, login names on SoSasta are just email addresses, so the list would have been handy for spamming, even without the passwords.)

Grzelak let Groupon know via well-known Australian security site Risky Business, and to the group's credit, it set about fixing the obvious parts of the problem pretty quickly. The database is no longer accessible via a Google search. SoSasta also apparently contacted its users and advised them to change their passwords.

Read More & Source .

[JayCub]

One thing the hackers have proved over the last couple of weeks is poor security, it's not fair on the subscribers, the company is the problem.

[Bearcat]

Digital discount site Groupon is well known in the USA

H'mmm, never heard of them before, but it would seem like that is a good thing!

[INDRANIL]

They are offering Free lunch in Hilton Hotel in New Delhi, . Cr*p .

[Bearcat]

They are offering Free lunch in Hilton Hotel in New Delhi, . Cr*p .

A free lunch? Maybe they will serve fish Indra. You better go check it out!

[INDRANIL]

O man stinking food. No way I would like to die rather than eating that food .