Israel Security Company: Ali Or Exposing Millions Of User Information

On the morning of December 10th, Beijing time,

AppSec, a network security company, says millions of Alibaba users may have been exposed to vulnerabilities on their platforms.

AppSec Labs says one of the company's employees is in the company.

A loophole found in the code of the website can be exploited by hackers.

。

"If I want to buy a $600 phone, I can change the price to $1, then I'll buy the order."

AppSec founder Alidze Metura (Erez Metula) said, "I can see what people buy, then change the delivery address and send things to me."

Metura said one of the vulnerabilities was discovered by a 21 year old employee, Barak Tawily.

He said there were no signs of theft of user data.

Amitay Dan, founder of information security company Cybermoon, said he had discovered another vulnerability that could harm Alibaba users' personal data. But after he informed the Alibaba about the matter, the company had already repaired the problem. Amitay Dan (Amitay)

Alibaba spokesman Mori Morgan (Molly Morgan) said on Tuesday that these two vulnerabilities have been repaired.

"We will spare no effort to continue to ensure the safety of pactions on the platform."

She said.

Alibaba raised $25 billion in NYSE's IPO (initial public offering) in September this year, making it the highest IPO record ever.

Related links:

During the China International feather and down fair, China feather Industry Association announced the quality inspection of Tmall Taobao hot down eider.

According to the results of spot checks, only 9 samples were qualified in the 38 samples being tested, and the pass rate was 23.7%.

Of the 29 unqualified samples, 26 samples were filled with crushed wool, wool or chemical fibers. They could not be called down garments at all. They could not play a role in preventing cold and warmth.

The head of the association said that in order to crack down on counterfeit and inferior products and purify the rapidly developing online market, the China feather and down Industry Association conducted a quality check on the down coats sold by Taobao and Tmall.

The sample work was completed in November 11th.

On the Taobao and Tmall, China Badminton Association bought 38 more down the top sales of clothing, including 8 men's wear, 21 women's wear and 9 children's wear.

The 38 samples were sent to two IDFB accredited Chinese testing laboratories on 15~18 November respectively, which have rich experience in detecting down products.

The sampling inspection work is based on the inspection standard of GB/T 14272-2011 "down garments", and the main indicators such as cashmere content, cashmere content, fluffiness, cleanliness and oxygen consumption of the samples are detected.

Of all the samples, 28 samples were not qualified, 26 were not qualified, and 3 were unqualified.