Thousands of 'Private' Careerbuilder 'Monk-e-mails' Viewable By All
CareerBuilder, the job site that has a love affair with chimps, has had a feature called Monk-email for a while that lets people create video messages to send to their friends. Usually when companies engage in this sort of send-a-message-to-a-friend thing, the assumption is that the message will be private and only viewed by the intended recipient. Well, it seems that's not the case with CareereBuilder's Monk-e-mail. As Adrants reader Taariq Lewis tells us, one can very easily view any of the thousands of the individually created messages simply by changing a few of the numbers in the URL.
The site, powered by Oddcast, simply creates an un-secured URL to be sent to the intended friend leading them to the message. No where on the site does it say the message will be secure but, even though the messages are not personally identifiable, it might be a bit disconcerting to some if they knew their message could be viewed by anyone who wanted to fool around with the link. All you have to do to view messages is change the X's in the "mid=75xxxxxx" portion of the URL. You can start with this one but make sure you're wearing headphones unless your co-workers don't mind swearing.