There have been more instances of this problem, seemingly beyond Admin’s earlier explanation, with no input from Admin as of yet on these new instances, captured with screenshots. Please see UEN’s earlier post for the situation, plus the new updates.
EDIT: Admin’s many locks and responses are reposted in comments below.
EDIT (by starrydesigns): Read about the latest incident here.
EDIT: (by Soap) - latest update here - click.
July 23rd, 2007 at 2:30 pm
People can get it anyway when you buy or sell with them, and you never know who they might share it with. But you get theirn address too, so at least that is some comfort.
I agree I don’t want random people knowing my address. With your full name, address, phone number, and last 4 digits of your credit card, that may be enough for identity theft.
July 23rd, 2007 at 2:09 pm
I just looked at the account info page for the first time in a long time. That has our street address!!!! I find that VERY scary. Almost more bothersome than credit card info. Yeah, no one wants their money messed with but it IS just money. The LAST thing I want available on the internet is my home address! That is a personal safety issue. As far as I’m concerned my personal safety is more important than my credit cards.
July 23rd, 2007 at 1:49 pm
http://www.etsy.com/privacy_policy.php
I think this only applies to info collected by etsy when you register like real name, email, credit card #, etc. They have to proimise not to sell that info or give it to anyone without your agreement.
However if someone gets into another user’s account info page
http://www.etsy.com/account_info.php
that does have real name, email, street address, etc
July 23rd, 2007 at 1:42 pm
Well I stumbled across this.
http://www.truste.org/ivalidate.php?url=www.etsy.com&sealid=101
From what I can tell from a quick glance over this webpage Etsy is a member of this oragnization that expects it’s members to meet strict privacy guidelines. I would assume what is going on now doesn’t meet their standards and there is a place to file a complaint with them. I’m going to go read it a little closer.
July 23rd, 2007 at 1:41 pm
yep
July 23rd, 2007 at 1:40 pm
the only ones “higher up” than the admins are the investors, the board of directors if they have one.
Other than contacting them I guess your recourse is to stop using etsy. :-(
I really don’t wanna do that.
July 23rd, 2007 at 1:37 pm
I wonder–is there any recourse against Etsy on a legal standpoint if a seller lost money due to this? ie. Someone happens to get logged into someone ELSE’S account..and changes the paypal email address to their own so any money going into the store will be deposited into THEIR paypal account instead. You don’t need a password to do that, nor do you need a credit card number–just an email address…
Do we have any way of “taking this higher up” if Etsy Admin refuse to even see this as a problem muchless do anything about it?
July 23rd, 2007 at 1:30 pm
I don’t so much blame them for the initial bug happening, security bugs do happen and you can’t predict or test everything and sometimes there are holes. Sometimes you only find the holes when someone exploits them. That happens to every software company. But once you know about it, then it needs to be priority #1 to fix any security or privacy related bugs. Sometimes you can only lock the barn door after the horse has run away, but at least you can prevent any more horses from getting out. So I don’t blame them for the first time but I do blame them for the mishandling of the issue AFTER they knew about it.
July 23rd, 2007 at 1:21 pm
Honestly, I don’t care if they respond in a forum thread BUT if they’ve KNOWN about this issue since FEB, they should be acting - or should’ve acted to correct the issues months ago.
THAT would’ve been reasonable, methinks.
July 23rd, 2007 at 1:20 pm
“And why did they have stella reply instead of RD,”
That’s actually probably a smart move.