MINI2

jtalarico · Aug 6th, 2002, 12:41 PM

Has anyone else gotten bored and tried to spoof data on the Owner's Lounge? The thing I find interesting is that you don't even need to log in to get vehicle tracking data.

Try this:
1) Log in and choose the option to track your vehicle.

2) Copy the URL in the browser once you get to the tracking screen.

3) This URL can be used directly without ever logging in again. In fact, if you change the numbers in the URL after the VehicleID parameter, you can see other orders!

Not sure if this data should be secured, but it seems strange that it is so open.

jtalarico · Aug 6th, 2002, 12:45 PM

After trying several numbers, I was even able to get tracking info on some other models...like an M3.

zwoman · Aug 6th, 2002, 05:25 PM

Okay now after you view the info of another car, are you able to click on the "Home" link to go back to the main page where you can edit your personal information? THAT would be a problem...

Aug 6th, 2002, 12:41 PM	#1
jtalarico MINI2 Regular Join Date: Jun 2002 Location: The Frozen Tundra Local Time: 05:12 AM Posts: 225 Offline	Owner's Lounge Security Problem?? Has anyone else gotten bored and tried to spoof data on the Owner's Lounge? The thing I find interesting is that you don't even need to log in to get vehicle tracking data. Try this: 1) Log in and choose the option to track your vehicle. 2) Copy the URL in the browser once you get to the tracking screen. 3) This URL can be used directly without ever logging in again. In fact, if you change the numbers in the URL after the VehicleID parameter, you can see other orders! Not sure if this data should be secured, but it seems strange that it is so open. PS/B MCS, bonnet stripes, everything but the satnav, 17" S-Lites

Aug 6th, 2002, 12:45 PM	#2 (permalink)
jtalarico MINI2 Regular Join Date: Jun 2002 Location: The Frozen Tundra Local Time: 05:12 AM Posts: 225 Offline	Follow-up! After trying several numbers, I was even able to get tracking info on some other models...like an M3. PS/B MCS, bonnet stripes, everything but the satnav, 17" S-Lites

Aug 6th, 2002, 05:25 PM	#3 (permalink)
zwoman MINI2 Regular Join Date: May 2002 Location: Alabama - not by choice! Local Time: 05:12 AM Posts: 74 Offline	Okay now after you view the info of another car, are you able to click on the "Home" link to go back to the main page where you can edit your personal information? THAT would be a problem... Shpass! Yellow and Black, 17" wheels - GRRR Baby...I love my MINI!

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Rate This Thread
Rate This Thread:

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Owner's Lounge ?'s	hedcase38	General Discussion	5	Feb 20th, 2005 11:48 PM
i got my picture in the owner's lounge!	Hat	General Discussion	7	Feb 18th, 2003 05:37 PM
MINI Owner's Lounge	Electrc109	General Discussion	3	Jul 8th, 2002 06:39 AM
Owner's Lounge VS Reality ???	kshapiro	General Discussion	7	May 19th, 2002 11:49 AM
Problem - Owner's lounge specs. vs. dealer's	jim	General Discussion	3	Apr 5th, 2002 02:14 PM

MINI2

Fuel for your MINI obsession

Use this area to discuss your MINI's delivery

Today
Sponsors	Sponsored Links Registered members do not see Google Ads posts, they can also post messages, pictures, and classified adverts. Register your free account today and become a member of MINI2 - MINI Forum

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)