Comments on: Myntra’s Privacy Hack [Your Invoice Open to Public]

By: Shyam

Shyam — Mon, 21 Jun 2010 05:54:56 +0000

My experience with Myntra has been horrid, to say the least.
They don’t deliver on time, don’t keep you updated on the status of your order, and worst of all, don’t make any efforts to hasten delivery!
In short, minimum customer satisfaction, maximum frustration and indefinite delay!!!

By: Manish

Manish — Fri, 26 Dec 2008 08:27:18 +0000

This is disgusting! Being in the IT space myself, I can say that this is a result of complete carelessness from the team. It is the basic rule of planning any code that you secure a users private information! And to be lax on that is ridiculous!!

By: anjali

anjali — Fri, 26 Dec 2008 05:58:25 +0000

Hello , This is not about to get persolized or take sentiments. Lets face the fact that Myntra is / was having the big security flaw. This is the question of securing people’ data. Unfortunately like US, India don’t have any strigent Data Security laws in place. Rather than treating it sentimentally, i request people to suggest ways to implement solutions like RSA mechanism.
- Anjali

By: Raxit

Raxit — Thu, 25 Dec 2008 22:03:11 +0000

Update 2 @

http://raxitsheth.blogspot.com/2008/12/hacking.html

-Raxit

By: Rohit

Rohit — Thu, 25 Dec 2008 18:06:19 +0000

I agree with both Jayant and Deep.
@Deep: Yes mistake happens, and it has been fixed now, I guess.
@Jayant: I agree with you here that myntra should inform their all customers about it. As it is of course a privacy breach as well be honest with customers. Bribing a t-shirt offered by one of their core team member (Ashutosh) is something that is not ethical at all.

By: jayant sharma

jayant sharma — Thu, 25 Dec 2008 17:50:26 +0000

hey deep
sorrry abt that – what i was trying to say is pretty simple – indiatimes/sify/rediff’s ecomm sites are the older sites and because of their ‘lack of respect’ for security etc, we blame them for not being able to win the trust of indian consumers.
If new age startups also do the same, what’s the diff.? Are they another indiatimes in making?
Rectifying an issue is no big deal (even biggies do that), but what about the basic code of conduct that these sites should follow? Isnt there a need foe one?

Again, sorry for those ** comments, pal!

By: Deep Ganatra

Deep Ganatra — Thu, 25 Dec 2008 17:37:53 +0000

aah.. for some reason, it did not show the quoted text in blockquote… the text

“And pls do not compare indiatimes’ shopping error with the new age tech players (supposedly) – if these tech startups behave the same as others, what the f**k are we talking about india tech dream then?”

was wirrten by Jayant Sharma FYI

By: Deep Ganatra

Deep Ganatra — Thu, 25 Dec 2008 17:36:50 +0000

Jayant Sharma:

And pls do not compare indiatimes’ shopping error with the new age tech players (supposedly) – if these tech startups behave the same as others, what the f**k are we talking about india tech dream then?

I think this discussion is getting bit abusive here.. I thought people will be sensible enough to use proper language and dont get into personal wars…

Anyways, coming back to your comment…

I compared wordpress application in this example, you said dont do it.. i explied the logic behind it..

Then I compared Indiatimes shopping site, now you are saying, it is an old age system… do you even know what you are talking about?

It is old and it is strong too.. they are HUGE… these small ecom sites are nothing compared to it…

Anyways, no point in arguing as it doesn’t make sense to drive the topic to some off topic…

Cheers
Deep

By: Alok

Alok — Thu, 25 Dec 2008 17:28:35 +0000

This indeed is a big goof up, and am sure Myntra guys would be embarrassed to the core. The good thing is that the issue was fixed within no time which is quite commendable. Mistakes do happen, and let’s not forget that these guys are also trying to build a business, just like most of us. As fellow (or wannabe) entrepreneurs, we should know that mistakes are a part of growing up .. what matters is our ability to rectify them and make sure they aren’t repeated. Myntra has managed to rectify it, and I really hope they don’t repeat it again.

Cheers

By: Ashish

Ashish — Thu, 25 Dec 2008 17:05:04 +0000

That was quite a stupid statement to make – he requested me to not publish this article till myntra fixes the issue (otherwise anybody could have easily seen other’s invoices).

Please avoid making such irrational comments.

-Ashish

By: jayant sharma

jayant sharma — Thu, 25 Dec 2008 17:02:43 +0000

Well dude – all I can ask you to is req you to stick to the topic – you know founders, you make money out of them,,,blah blah..how does that affect this issue?
Isn’t this a serious privacy breach? Did Myntra informed it’s customers abt the issue (and fix)? they instead bribed raxit to not talk about it (F**king shame!).

And pls do not compare indiatimes’ shopping error with the new age tech players (supposedly) – if these tech startups behave the same as others, what the f**k are we talking about india tech dream then?

By: Raxit Sheth

Raxit Sheth — Thu, 25 Dec 2008 14:59:24 +0000

Hi Manoj, I have not put any wrong information, and what-so-ever i put on my blog was after the confirmation of myntra that they have fix the bug. I am not from Myntra or Competitor’s side.If we wanted to pissedoff, we can put the stuff even before they fixed, but i feel it is unethical to publish the stuff when myntra has informed us that they will fix it earliest. Why it had taken more days to fix, reason is provided by Ashutosh (myntra) in above comments !

Happy Hacking

-Raxit Sheth

By: Deep Ganatra

Deep Ganatra — Thu, 25 Dec 2008 13:58:04 +0000

Guys.. I think everyone should stick to the topic… I dont see any neeed for myntra is good or bad….

There was a loop hole, which was fixed by the company.. that’s about it… it does not make the company less or more trustworthy…

Mistakes happen with everyone… and there is no need to make it out of proportion…

Just my 2 cents…
Deep

By: Manoj

Manoj — Thu, 25 Dec 2008 13:51:16 +0000

Raxit may be putting all wrong information or he may be myntra competitor or you may be myntra guy,just trying to blame someone, competitors may be a easy bet.

By: Sumit

Sumit — Thu, 25 Dec 2008 13:03:01 +0000

sorry ’bout that !!!!

By: Sumit

Sumit — Thu, 25 Dec 2008 13:01:10 +0000

Mukesh is a friend before a client. And yes, these relationships go a long way. And these loyalties are more personal than professional.

@ Amit K – I must commend you on your researching skills. If you and others are so intolerant about accidental errors, if you are an employee of a company, maybe your boss should know that you have 0% tolerance and you will quit your job if you make an accidental error (high ethical standards should be self-imposed before imposing on others).

Myntra is a client that we have seen grow and have helped grow and which is why I have full faith in Mukesh and his team.

Guys, everyone that takes the plunge in starting a company does it because he sees a value to be provided to its customers (you guys). This site – pluggd.in is to promote entrepreneurship. But things like these where you jump so negatively for an accident makes me loose faith in such discussion forums.

Only if we could convert all this negative into something positive.

Best wishes everyone and happy new year !!!

Sumit

By: Sanjiv Mishra

Sanjiv Mishra — Thu, 25 Dec 2008 13:00:13 +0000

Hmmm…If any business offers a compensation, it must be a bribe!! Is this guy real or a myntra competitor in disguise. If a company makes a mistake and offers me some comp in return, I feel good that someone is owning up to their mistake. I guess the concept is too foreign to some cynical people who feel everyone out there is a crook. !

By: Vidya

Vidya — Thu, 25 Dec 2008 12:48:19 +0000

Hi Guys, I have purchased over 5 T-shirts at Myntra. they are one of the most customer friendly company I have ever dealt with. Once I received a defective T-shirt which they promptly replaced w/out asking any questions, Another time I aksed them if I can get a personalized gift within 24 hours and they personally hand delivered. Some of the comments above are quite malicious and I wish people judge things objectively,

Vidya

By: Amit K

Amit K — Thu, 25 Dec 2008 12:41:57 +0000

@ Sumit (from thehiringtool.com) …
Did Mukesh (founder of myntra) ask you to write this comment?

Hahaha….this is a good way to build your creditability in front of your client (myntra.com) and earn more business ..
I understood why you have full faith in myntra LOL

I did some research and found in linkedin profile of myntra’s CEO (search Mukes bansal in linkedin), there are three people recommending Mukesh. See the very recent one..written by thehiringtool.com

“Mukesh is very focussed and believes in quick action. It is a pleasure working with him and his promptness adds to the success our partnership.” December 5, 2008

Nupur Panjabi, Founder, thehiringtool.com
was a consultant or contractor to Mukesh at Myntra Designs Pvt. Ltd.

Good job Sumit!!! myntra will of course keep you for their recruitment works

I guess few more associated companies will now put good comment about myntra to earn their loyalty.

By: Manoj

Manoj — Thu, 25 Dec 2008 11:56:24 +0000

Financial crisis do prevent people from investing, this is a well known fact.

Faith in myntra??? must be kidding…

By: Raxit

Raxit — Thu, 25 Dec 2008 10:37:08 +0000

Sumit,

its best to explicitly put to whose comment you are replying . people are assuming you are replying to me, i have not made any statment regarding invstmnt.

-Raxit

By: Sumit

Sumit — Thu, 25 Dec 2008 10:10:50 +0000

This is completely absurd….the amount of negativity !!! The issue was promptly fixed. This issue is not even close to the financial crisis happening around you…does that stop you from investing?

I have full faith in Myntra !!!

By: Raxit

Raxit — Thu, 25 Dec 2008 08:59:24 +0000

Hi Deep,

>About founders offering free tshirts… I donno about it.. may be Raxit or someone >from company would be able to answer that…
My Answer is my blog post !

http://www.m4mum.com
Raxit Sheth

By: Deep Ganatra

Deep Ganatra — Thu, 25 Dec 2008 06:32:43 +0000

Yup… you are right.. they are answerable to customers and I think that’s why they fixed it without delay too right?

You won’t believe but, these kind of loopholes were / are present in many known ecommerce sites too… I had found xss hole in Indiatimes website ages back.. they didnt bother to reply or fix it… these guys are atleast active and fixing it before other people get info over it…

About comparing WP and this application.. no I am not comparing on platform wise, I know WP is Opensource and this one is prviate application.. but my point was, in any scenario, any kind of tight security, the loopholes are going to be there and application becomes stronger only after digging & fixing them..

About founders offering free tshirts… I donno about it.. may be Raxit or someone from company would be able to answer that…

cheers,
Deep

By: jayant sharma

jayant sharma — Thu, 25 Dec 2008 05:54:52 +0000

” you are answerable to cos.” – i meant customer.

By: jayant sharma

jayant sharma — Thu, 25 Dec 2008 05:53:52 +0000

Well..its not abt a small mistake – when you are making money on per txn, you are answerable to cos.
and whether one trusts myntra/others based on few mistakes is a personal choice, but i believe cos. should just not spend money on adwords and have some budget for QA as well.

one shdnt even compare wp security plugs with application plug – wp is a platform (like OS/CMS) and its bound to be a fav for hackers..

while myntra is an application – so pls do not even compare the 2.

looks more like one of the founders offered free tee for not posting..well..what can one say

By: Deep Ganatra

Deep Ganatra — Thu, 25 Dec 2008 05:37:48 +0000

Santosh – by this small mistake, you cannot really say that you won’t trust the company… security holes keep on coming in every software.. be it minor or major..

Anyone can make mistakes.. .even in wordpress too, new security holes keep on coming… so it does not mean that, we should stop using the software… they will audit it and fix it up…

About someone offering a free t-shirt for not posting – I think someone from their company might have done it.. (programmer or some marketing guy) it might not be official from CEO or any top post guys….

But looking at the circumstances.. there are high possiblities that, companies might offer this kind of thing to avoid security holes going into public…

We are humans.. we all make mistakes

Just my 2 cents…

Cheers,
Deep

By: jayant sharma

jayant sharma — Thu, 25 Dec 2008 04:21:25 +0000

Now thats a holy shame!! That’s called as pure bribing!
I suggest cos. should just come out in open and accept their mistake, instead of their users finding the hard reality from somewhere else..

Surely one cant trust them with $/data now.