0

I receive another person's emails and have access to his account (able to edit)

first of all, in case this message goes public onto your support page, I do not use my real name. Let's assume my name is Peter Parker. 

Today I begun to receive another person's emails, and in the emails, there is a link to his profile. By clicking on this link, I have complete access to his profile and I am able to edit his settings. This person's name is also Peter Parker. He is the same age as I am. His birthdate is only 2 days earlier than mine. Mine email address is peterparker@gmail.com. His email address is peter.parker@gmail.com. But your system send his messages to me. According to the emails I have received, this person joined geni today. I WONDWER, FROM TODAY, DOES HE GETS ALL MY EMAILS AS WELL?????

How the hell you can have such a bug in your system? It discloses material information to strangers who can do what ever they want with it. 

0 comments

Please sign in to leave a comment.