Kickstarter API bug allowed 70,000 unpublished projects to be visible by public

Kickstarter bug allows 70,000 projects to be publicly visible before publishing.

@tracehagan
Published Mon, May 14 2012 11:29 AM CDT   |   Updated Tue, Nov 3 2020 12:28 PM CST

Programming bugs almost always make their way into production code through some inadvertent way. This time it is Kickstarter who has found a flaw in some of its code. This bug allowed access to 70,000 unpublished projects' project description, goal, duration, rewards, video, image, location, category, and user name.

Kickstarter API bug allowed 70,000 unpublished projects to be visible by public | TweakTown.com

On the Kickstarter Blog, they have made it abundantly clear that no financial data was ever publicly visible. Of the 70,000 "visible" projects, only 48 were viewed, and that includes views by the Kickstarter team trying to verify and patch the bug. The bug had been introduced into the code with the April 24 homepage redesign.

The bug was introduced when we launched the API in conjunction with our new homepage on April 24, and was live until it was discovered and fixed on Friday, May 11, at 1:42pm. The bug made accessible the project description, goal, duration, rewards, video, image, location, category, and user name for unlaunched projects. No account or financial data was made accessible.

Based on our research, the overwhelming majority of the private API access was by a computer programmer/Wall Street Journal reporter who contacted us. Outside of that person's use, our research shows that a total of 48 unlaunched projects were accessed during the three weeks this bug was live (this number includes a number of views by Kickstarter's developers working on the API itself).

NEWS SOURCE:techcrunch.com

Trace is a starving college student studying Computer Science. He has a love of the English language and an addiction for new technology and speculation. When he's not writing, studying, or going to class, he can be found on the soccer pitch, both playing and coaching, or on the mountain snowboarding.

Newsletter Subscription

Related Tags

Newsletter Subscription
Latest News
View More News
Latest Reviews
View More Reviews
Latest Articles
View More Articles