UK: Labour forum leaks email addresses

John Leyden reports:

Basic design flaws on a Labour party members forum exposed the email addresses of users to harvesting.

Surfers who register through the site http://members.labour.org.uk were invited to confirm their membership, and activate their account, by clicking on the link in an email sent to a specified account.

The email follows the form http://members.labour.org.uk/man-auth/ActivationSent/10000XXXXX

Read more in The Register.

About the author: Dissent

Comments are closed.