Cheap Down Jacket!!

“Check this out. Land's end has down jackets for $30. Treebait, myself and some other hikers I know have these and they are nice.”

“that's a great deal. thanks”

“HPM,
I'm in the process of purchasing a jacket and when I went to check out all the ordering fields are/were filled with your (MJM initials for proof) personal info with exception the credit card stuff. Be careful when posting links from your account.”

“Default Shipping Address:
Robert J Monoson
8092 DONEGAL LN
JACKSONVILLE, FL 32244-6260
United States



This is the info filled in for when i try to order..WHAT THE HELL..it even keeps it when i try to create a new account...i think the credit card info is saved too...i'm not doing anything with this crap..someone needs to figure this out...and i can't find my glasses (OPIE)”

“Ok this is freaking bizarre.

I just clicked the link and got Opie's email.

MJM isn't my initials. And Robert is someone I passed this link onto.”

“Now it is showing my email.

This link was passed to me by someone else.

Something is screwy with their code that controls sessions or cookies.”

“with the link screwing up it might be worth while just to call them tomorrow to order”

“i'm on the phone with lands end..i have let them know what is going on and they are trying to fix it so noone can use this information....hopefully it will be fixed...they are concerned that this is very insecure ....i'll let you know what i find out....i'm gonna get a large..and miss opie a small..how do the sizes run?”

“on hold waiting for their tech guy”

“Opie, the womens jacket is on sale also at the same price”

“If you do someone who uses it after you may be able to view your info

Just go to land's end and click the overstocks tab then "Mens" to find the jacket but don't use the link I posted to order and you will be secure.

What is happening is that Land's End.com is assigning what is called a session ID to each time someone visits their site. Their server is caching (saving)info collected during each session and rather than coding in a delete routine that runs (deletes colleted info)when a transaction is completed they are letting the session expire (delete) after a set amount of time.

The problem is that some smarty coder/business analyst didn't think that anyone would ever send a link to a product to a friend using a cut and paste and didn't think to offer an "email this product to a friend" option.

Someone needs a refresher in usability/security.”

“I'm 6 6 200lbs and bought a Men's tall in Large. Fits like a champ.”

“Tell them your hiking buddy is a usabilty expert and is looking for a job.

I will need to telecommute from Jacksonville.”

“now my e-mail address is being used on their site, and i can't create an account...errr ok...now they say if this problem happens again to use the deactivate button..they sounded like this wasn't a problem and that it will be safe....HA”

“Great!
Visa just called and alerted me that there is an unusual amount of activity on my card being charged by Lands end. $2013 in the last half hour!!! Needless to say, you folks who are using my credit card won't be getting anything except a visit from the MAN!!!”

“Not a problem? Maybe not for us but someone is going to have a VERY crappy Monday when this gets to the attention of the managers.”

“Um.....sure.”

“I did notice something on the Ocala trip. I think my blood is a lot "thinner" than those northern folks. CMB was in his base layer after sundown, while I felt better in three layers even close to the fire. he hman body is amazing in its ability to acclimate.”

“Me have thick blood!

By the way that is a good deal for that jacket but how cold do you all think it can keep ya warm to.

8)”

“Thanks HPM for the heads up on the jacket.I ordered one today "over the phone".

Thanks Ewker they did have womens also the same price,nice colors.”

“Thanks HPM, got a womens' in true red coming my way!”

“Thanks for the heads up. I think I will get one. $30!

How heavy are they?”

“Wow, I just bought a coat on Opie's nicket. Thanks Opie. It isn't even Christmas. I knew you Auburn guys weren't all bad.”

“You get a better discount if you order online.”

“cool... now come on tax check!!”

“hey..what's your thoughts on the parka vs the jacket..they are the same price and you get @$$ coverage with the parka...i'm dumb in this feild..HELP KEEP ME WARM!”

“Opie:

I would think the jacket would fet better under a shell as it appears to come to about waist level and has a cinch cord. It looks a little more bare bones than the parka, which seems to have big outter pockets and may be made of a more burly material = more heavy.

I'm just talking outta my azz tho...”

“Thanks for the heads up on the jackets. We have ordered two, one for my husband in deep navy and one for myself in true red. I was happy to hear they had them for women as well as for the guys.”

“I just sent a little news tip about this breach of security to the newspaper in Madison. This is just appalling! If this story were happening in my backyard, I'd want to know and give it the coverage it deserves.”

“I just got 5 lbs. of down from UPS
big bag in a box and not cheap.I can't buy the materials for $30.00.
to make that jacket.I'm going to make some 40*F quilts and some 25*F barrel bags and shoulder lenght seperate hoods like the ones on the thru hiker.com.”

“I bought the jacket and I had to go with a parka length rain parka to cover it.”

“salebored - where did you get the down and what fill power is it? the 800 stuff on thru-hiker is $8/ounce - 5 #'s would be, let's see, carry the 3, $640.00 Wow!”

“I broke down and bought a jacket....ash blue!”

“Brenda Ingersoll

Is this the person you emailed? She emailed me about the Land's End dilema.”

“Mine arrived today. The color kinda sucks, but other than that it is a nice jacket.
For those that are interested - I weighed mine. It is a XXL jacket - 32.0 oz with the hood or 28.4 oz without”

“Oh yea... Thanks for the heads up HPM”

“hangman..what color did you get?...i wanted ash blue..but something told me it might look like baby blue..so i got dark blue and black”

“Laurel was comfy in it when it got down to 18 degrees here.”

“Awwww, you guys have yerselves one cute baby! And a nice down coat too.”

“Miss Opie, yup. I had talked to her today. She must have gotten your e-mail from your profile. I had told her I could probably get her some real names, if she wanted. I don't know yours! Well, I have figured out your first name. Also, I tried to tell her I thought it was your boyfriend posting under your name, if she choose to contact you........ I can understand her wanting to get more info and wanting names. You need that for a story.”

“Story?
What story?

That they had a session not expire and someone saw someone else's address? Big freaking deal! You can got to switchboard.com and get anyones address. Addresses are public domain. Seeing one doesn't constitute a security breach.

It was most likely a piece of bad or corrupted code. Happens all the time. More than you know.

To my knowledge no ones credit card info was compromised. Now THAT would be a security problem.

Sure Captain Underpants claims to have fraudulent charges but that is a well known troll name so how can you possibly take that post seriously?

My post about someone getting torn into at Land's End is because little nothing stuff like that causes non-coder folks to panic. And rightly so. If you see something screwy the average intelligent person passes on or calls the company on the issue. As I would hope most people would do rather than call a newspaper.

They probably had some code get corrupted so that the session expire got whacked and they re-rolled it, issue solved, move on.”

“In case I was wrong about Captain Underpants (and I don't think I am)I would appreciate it if you would tell us for real if you were joking or not. Your joke (if indeed it was) can easily damage a reputable company.”

“I'm with HPM..i was gonna call this chic and tell her it was nothing and to find something for her slow news day elsewhere”

“OPIE - I got the ash blue. It is darker than baby blue - maybe just a little lighter than medium blue - if that makes any sense ???
I'm not real happy with the color - but I only plan to wear it on the trail - not to the mall. The price was certainly right.
Did you order one ?”

“they put mine and miss opies in with ups today...mine is black/dark blue..and hers is dark lilac...pics to be posted!”

“HPM HAS TWO HEADS!!!



Isn't Captain Underpants aero?”

“it looks like a baaaaaaby *fat bastard*”

“I got the ash blue too. Shipped yesterday.

I love getting packages in the mail!”

“If a company's internet ordering system is compromised in any way, it's news.

I told her I didn't know if the person who claims to be "Capt. Underpants" is even real, FYI. I told her it could be a joke by that poster. It would be to all our advantages to know if this person really did have charges rung up as was said.

I guess you'd rather keep private business errors private, eh? Guess we'd never know about Enron or the accounting company then. Little errors can become big errors.

I shudder every time I type a credit card number into an internet order form. Theft identity is a burgeoning crime these days. So if one place screwed up, and everyone can learn from that and it enables them to better secure their systems, isn't that a good move?”