Question

[ajw]

I'm posting to this forum because it seems to get the most traffic.

I am bidding on some items in tonight's Hunt auction for a friend. I just realized that it is possible to look at OTHER bidders' bid profiles, including their current bids and maximum proxy bids. (also includes name, address, phone and email for the bidder.)

I'm *stunned* that this is possible. I can't believe I'm the first person to discover this and am shocked the company hasn't done something to prevent it.

Am I the only one?

[glchen]

I had no idea this was possible, but after you put this post up, I tried it, and it dang easy to do. This is a huge security gap for Hunt.

[deebro041]

I haven't been able to look at the bidders. Tried for 10 minutes and couldn't find anything.

[ajw]

I'm going to cross post this to the main Pre-War forum. I hope that's not a huge problem, but I just realized that forum is actually the one that gets the most traffic...