Two more instances of Sprint's insecure online system:
1) Members of the Howards Forums cellphone message boards have discovered a URL hack that lets users add the "Unlimited Shared Night & Weekend Minutes at 5pm pack" for free to their account.
2) If you take this URL and replace the phone# at the end with the phone number of someone who hasn't set up the PIN on their account, you will see the last 4 digits of their social security number. Not a huge deal, we give out the last 4 of our social over the phone all the time, but it seems a bit odd to broadcast these numbers unnecessarily.
PREVIOUSLY: Flawed Sprint Security Worse Than We Thought
Flawed Security Lets Sprint Accounts Get Easily Hijacked
