|
|
I don't know how many Maruti owners register for the Maruti owners' online database. This site records owners' personal information like name, address, phone nos., email ids, car details etc.
I needed to update my profile in the database. I hit the submit button after updating my profile. I received no confirmation. Instead, I was put on the profile page of another Maruti owner! I could see all his details. I could even have edited the profile of that owner if I wished to! If I did choose to edit his profile, on hitting the submit button again, presumably I would have ended up on the profile page owned by still another Maruti owner, and could have edited his profile too, and so on, ad infinitum!
Being the nice person that I am , I just logged out.
-- And could not log back in for a while, because my password was messed up (the case of the letters got changed). My car details were flushed out too! Now the site does not update my password, -- the feature just does not work!
Does Maruti care about these issues? The owners' database security breach did not seem to concern them when I called! So, at best, owners are liable to have their personal details lying in an insecure database for anybody to do whatever they like with those. At worst? Who knows? |
|
