Marriott’s Android app left customers’ credit card information wide open for years

Marriottheadquarters
Marriott’s already been in hot water as of late, thanks to its decision to block personal Wi-Fi hotspots, a decision that led to an FCC fine of $600,000. Now, Marriott finds itself in even deeper hot water as a software developer discovered a vulnerability in its Android app, which reportedly left credit card information open for hackers to nab for years.

According to Randy Westergren, who is the software developer in question, he discovered the vulnerability after he logged into the app using only his Membership ID number. After doing so, he realized the app made a request to fetch reservations, even though he had none. He discovered that the app was fetching reservations through unauthenticated requests, which means he could type in a different Membership ID and send it to the server. By doing so, Westergren could find out a customer’s reservation, the hotel where they will be staying at, and the check-in time.

Once he had this information, Westergren could easily log into Marriott’s website with it, since the site only requires a last name and reservation number to log in. Doing so granted Westergren the ability to cancel planned trips and obtain addresses, credit card numbers, and customer information. Granted, only the last four digits of their credit cards would be revealed, but that would be more than plenty for hackers to work with.

Thankfully, according to Westergren, Marriott fixed the issue a day after his report saw the light of day. We’ve yet to read or receive any reports of compromised accounts, so if you frequently use the Marriott app, your information should be safe. Even so, thinking about how the app first launched back in 2011 with this vulnerability doesn’t exactly make anyone very happy, to say the least.

Product Review

4 Lenses, 40 megapixels, and 400k ISO. Huawei’s P30 Pro is a photography freak

Huawei’s P-series phones place an emphasis on the camera. That’s why the company partnered with Leica on the camera tuning. The latest phone is the Huawei P30 Pro, and it must fill the big shoes of last year’s stunning P20 Pro. Is it…
Cars

Tesla Model 3 vulnerability exposed at Pwn2Own; hackers take home the car

A Tesla Model 3 vulnerability was exposed at the Pwn2Own hacking competition. The hackers, who were able to display a message on the electric vehicle's internet browser, won $35,000 and took home the car.
Computing

Microsoft’s Clippy came back from the dead, but didn’t last very long

Before Cortana, Alexa, and Siri even existed, Microsoft Clippy dominated the screens of computers in the 1990s to help assist Microsoft Office users when writing letters. He recently made a bit of a comeback only to die off again.
Computing

How the Google Stadia could lead to a new era of multi-GPU gaming

Google's Stadia could use more than one graphics card to deliver the high-performance visuals it's promised. If that leads to better developer support for multi-GPUs, could that mean gaming with two or more graphics cards could finally be…
Movies & TV

Stranger Things season 3 is coming! Here’s everything we know so far

With a sophomore season as strong as its first, Stranger Things is now moving on to season 3. Here's everything we've learned so far about the Netflix series' upcoming third season, premiering in July 2019.
Product Review

Compared to the P30 Pro, Huawei may have stripped too much out of the P30 phone

Has Huawei pulled all the best parts out of the P30 Pro to make the P30, its cheaper, smaller sister phone? Yes, but the answer is more complicated than that. Here’s our look at the 6.1-inch P30.
Wearables

Carbon fiber is making Casio’s new connected G-Shock watches even tougher

Casio, a master of tough watches, has introduced carbon fiber to the construction of several G-Shock models, making them stronger and lighter, and allowing for some interesting design changes too.
Mobile

Huawei P30 Pro vs. Mate 20 Pro vs. P20 Pro: Which Huawei flagship is best for you?

If you're after a Huawei smartphone, but can't pick between this year's flagship and the previous two, or maybe you're looking to upgrade, we're here to explain what makes the P30 Pro, P20 Pro, and Mate 20 Pro different.
Mobile

Huawei P30 Pro vs. Huawei P30: Should you go pro or save some dough?

The latest phones from Huawei are seriously powerful, eye-catching devices, but what sets them apart? We take a look at the Huawei P30 Pro and compare it to the Huawei P30 in various categories to uncover the differences.
Mobile

The 13 best iPhone 7 Plus cases to protect your Apple phone

The iPhone 7 Plus is big and beautiful, but you need to wrap it up if you want to protect it from damage. We’ve rounded up some of the best iPhone 7 Plus cases and covers available. Get some protection or a new style today.
Mobile

Huawei’s Eyewear smartglasses aim to fuse fashion and tech

At its launch event for the new P30 and P30 Pro smartphones, Huawei surprised us with a pair of smart glasses. Created through a partnership with Gentle Monster, these glasses are designed to be stylish and act like a Bluetooth headset.
Mobile

Galaxy S8 owners on Sprint start receiving the Android Pie update

Android 9.0 Pie has been released. But is your phone getting Android 9.0 Pie, and if so, when? We've done the hard work and asked every device manufacturer to see when their devices would be getting the update.
Mobile

Huawei P30 Pro vs. Samsung Galaxy S10 Plus: 2019’s biggest flagships clash

Huawei launched the powerful P30 Pro. It's a beautiful phone with tons of power and some extremely capable cameras. But you could also describe the Galaxy S10 Plus that way — so which is better?
Mobile

Huawei adds a new, smaller Elegant size to the Huawei Watch GT range

Huawei launched two new versions of the Huawei Watch GT. The first, the Huawei Watch GT Active, comes with two new colors. The Huawei Watch GT Elegant comes with a smaller frame and a more elegant and stylish look.