A little over a year ago, an anonymous researcher pointed out a vulnerability on the USPS website that allowed site visitors to see users’ personal account info, including usernames and street addresses. Now, a year later, this vulnerability is finally being addressed by USPS, who cites an authentication API weakness on their website as the reason user information was made accessible to anyone.

Read full news article on Dzone