Hacker News Reader

As far as I can see, it is possible for all internet users to see customers orders and addresses using this technique.

Did I miss something or is this a real problem?

Yes but each order has a unique ID which only the customer who placed that order will have access to. If that customer decides to share that URL on his own discretion that is fine by us

Reply on news.ycombinator.com