[Full-disclosure] PayPal acount removal: bug or feature?

3APA3A 3APA3A at SECURITY.NNOV.RU
Wed Nov 29 20:31:17 GMT 2006


Dear full-disclosure at lists.grok.org.uk,

  I  was  trying to remember the password for my older PayPal account in
  order to close it. After a couple of unsuccessful attempts I've got an
  offer....  to  close  this account if I don't remember the password. I
  clicked  the link. It showed me current state (actually 0) and warned,
  because  it less than $1.5 it will not be funded. OK. I click "close".
  Now, guess what?

  account was closed (NO confirmation by e-mail, only "We are sorry that
  you have decided to close your PayPal account.").

  I'm quite unexperienced with PayPal, becase it's service for Russia is
  new and very limited. But it makes me wonder: is this "Feature" known?

-- 
http://www.security.nnov.ru
         /\_/\
        { , . }     |\
+--oQQo->{ ^ }<-----+ \
|  ZARAZA  U  3APA3A   } You know my name - look up my number (The Beatles)
+-------------o66o--+ /
                    |/




Full-Disclosure is hosted and sponsored by Secunia.