Home U.S. Coin Forum

Heritage site is not very secure.

PlacidPlacid Posts: 11,299 ✭✭✭
I clicked on the link to look at that pattern coin Mrdq posted about then I decided to look
at their auction archive and signed in looked around and then left the site.

A couple hours later I went back to check on a coin I had bid on to see if anyone out bid me and it shows that I placed two bid's on some liberty nickels that I didn't.

I have since changed my password but I have no idea what happend.

Now I have to call them and try to get it worked out image

Comments

  • tradedollarnuttradedollarnut Posts: 20,162 ✭✭✭✭✭
    two bids!?! They must have missed one, I was sure I put in three! image
  • dbldie55dbldie55 Posts: 7,731 ✭✭✭✭✭
    It is because people leave the SID in the url they give. They said they had addressed this, but obviously have not. If you give a link with the SID in it, you are giving your account, although you would need to know the password to actually do any bidding.
    Collector and Researcher of Liberty Head Nickels. ANA LM-6053
  • PlacidPlacid Posts: 11,299 ✭✭✭
    All I know is I am not going to pay $345 for this B.S.
    I didn't post the link it was mrdq's link.
  • dbldie55dbldie55 Posts: 7,731 ✭✭✭✭✭
    placid, you did not place any bids. Not sure why you think you did. If you follow a link with the SID, it will show you as that person. If you bid you would need their password. If it did let you bid, it would be as them, not you. The problem becomes if you follow some links with that SID, and have your info stored in a cookie on your computer, the SID now becomes you. The next person who follows the link will show up as you. They would still need your password to place a bid as you though.

    Collector and Researcher of Liberty Head Nickels. ANA LM-6053
  • PlacidPlacid Posts: 11,299 ✭✭✭


    << <i>I clicked on the link to look at that pattern coin Mrdq posted about then I decided to look
    at their auction archive and signed in looked around and then left the site.

    A couple hours later I went back to check on a coin I had bid on to see if anyone out bid me and it shows that I placed two bid's on some liberty nickels that I didn't.

    I have since changed my password but I have no idea what happend.

    Now I have to call them and try to get it worked out image >>



    dbldie55 above is exactly what I did. I now have two bids listed in the "my bids" section that I did not place and were not there this morning.

Leave a Comment

BoldItalicStrikethroughOrdered listUnordered list
Emoji
Image
Align leftAlign centerAlign rightToggle HTML viewToggle full pageToggle lights
Drop image/file