Hank Lee Magic not on a secure server?

Post topics about the business side of magic.

Postby Tony Rush » 04/06/09 01:52 PM

I had a big batch of stuff in the Hank Lee shopping cart this morning that I was about to pull the trigger on.....and I realized that it was sort of odd that the fields for credit card number and expiration, etc. were just basic "text fields". In other words, it didn't matter if you used hyphens or spaces, etc.

Then I realized why. It appears that when you place an order at Hank Lee, you're basically just submitting a form to their clerk who manually charges your card on the other end.

This wouldn't be a big deal except the whole thing is apparently happening on a non-secure server. It's basically like emailing your credit card number to someone with no protection or encryption at all.

I'm not an overly paranoid person but I did not complete my checkout. I actually found the same items from L&L Publishing and Penguin Magic and bought it all from them.

Has anyone else noticed this? Or was it a glitch?

Tony
Tony Rush
 
Posts: 40
Joined: 04/02/09 09:34 PM

Postby Dave V » 04/06/09 01:56 PM

Check your browser address line. If it's not "https://" it's not secure. Text field type isn't a sure way to test this.

EDIT: I just placed a test order. Sure enough, it's not on a secure server. If you're worried about it, maybe you should place the order over the phone.
"I still play with a full deck, I just shuffle slower"
User avatar
Dave V
 
Posts: 251
Joined: 03/13/08 01:44 AM

Postby the Larry » 04/06/09 06:07 PM

Don't know Hank Lee nor his business. Have never bought there. But any business that is not using a secure sever for their checkout is simply not a serious business. What they are implicitly saying is "we don't care about the safety of your financial information".

Maybe some will think this is harsh, but I think Hank Lee wouldn't help you if your identity gets stolen, because somebody was listening in on the transmission of the form with your credit card info to Mr. Lee.

Tony, you did the smart thing. I would never buy from any online dealer, I don't care who and what it is, if they don't use a secure server.
the Larry
 
Posts: 200
Joined: 12/28/08 08:43 AM

Postby Richard Kaufman » 04/06/09 06:27 PM

We've had this problem crop up once in a while. It probably was secure at one point and something hinky happened. Instead of making a big deal out of it, just call Hank and tell him that he needs to resecure his website! Simple!
Subscribe today to Genii Magazine
User avatar
Richard Kaufman
 
Posts: 20705
Joined: 07/18/01 12:00 PM
Location: Washington DC

Postby Nikodemus Siivola » 04/07/09 01:09 AM

It's probably a trivial snafu: the secure server is still there, but login doesn't take you to it.

Edit the URL by hand to start with "https" instead of "http" and you should be good to go.
Nikodemus Siivola
 
Posts: 29
Joined: 01/24/08 01:00 PM
Location: Helsinki, Finland

Postby Mats Kjellstrom » 04/07/09 01:26 AM

I did a test run, and at the check out this showed up: https://

http://www.magicfact.com/
Mats Kjellstrom
 
Posts: 165
Joined: 03/13/08 03:20 PM
Location: Everywhere

Postby erdnasephile » 04/07/09 11:18 AM

Richard Kaufman wrote:We've had this problem crop up once in a while. It probably was secure at one point and something hinky happened. Instead of making a big deal out of it, just call Hank and tell him that he needs to resecure his website! Simple!


1+ When things like this occur, it's usually far more effective to communicate directly with the party involved. Hank's always been very fair and straightforward to deal with, and he has always answered his email in the past. If there's trouble with the site, I'm sure he'd appreciate the heads up.
User avatar
erdnasephile
 
Posts: 2084
Joined: 01/17/08 01:00 PM

Postby Ricky Difeo » 04/07/09 11:33 AM

Hi!

I allways buy several books and accesories in Hank Lee Magic Shop, and never have problem with the credit card.
But I you have paranoic,you can buy using the secure paypal system for pay in Hank Lee.-
Hank Lee accept it and it is very secure.-
Hi, I live in Argentina, Buenos Aires, I havent problem with it.

Chau
Ricardo Difeo ;)
Ricky Difeo
 
Posts: 166
Joined: 01/17/08 01:00 PM
Location: La Plata - Buenos Aires - Argentina

Postby Ken Northridge » 04/07/09 01:52 PM

the Larry wrote:Don't know Hank Lee nor his business. Have never bought there. But any business that is not using a secure sever for their checkout is simply not a serious business.


I've been told that Hank Lee is one of the biggest mail order companies out there. That's pretty serious. FYI--I have always received good service from them.
Ken Northridge
 
Posts: 19
Joined: 08/02/08 01:05 PM
Location: Atlantic City, NJ

Postby Tony Rush » 04/08/09 10:27 AM

erdnasephile wrote:
Richard Kaufman wrote:We've had this problem crop up once in a while. It probably was secure at one point and something hinky happened. Instead of making a big deal out of it, just call Hank and tell him that he needs to resecure his website! Simple!


1+ When things like this occur, it's usually far more effective to communicate directly with the party involved. Hank's always been very fair and straightforward to deal with, and he has always answered his email in the past. If there's trouble with the site, I'm sure he'd appreciate the heads up.
I'd already emailed him when I posted here.

I don't actually think it's a glitch. The sure way to know if you're on a secure server is to look for the https:// in the address bar.....but the reason I mentioned the text fields is because -- if the site had been secure in the past and had become UNsecure as part of a glitch -- those fields would still be designed to take information in a specific format.

In other words, it's unlikely that this particular checkout page has ever been on a secure server. No idea why. Maybe I'll hear back from them.

Tony
Tony Rush
 
Posts: 40
Joined: 04/02/09 09:34 PM

Postby Tony Rush » 04/08/09 11:28 AM

Just got a note back from Hank. He says that the credit card page is supposed to be secure and that he's looking into it.

Good to hear,

Tony
Tony Rush
 
Posts: 40
Joined: 04/02/09 09:34 PM

Postby Jack Turk » 04/08/09 07:15 PM

I've bought stuff from Hank Lee multiple times and have
always been happy with the materials and the customer
service.

And since this is a marketing area... get on Hank's
email newsletter. He does a fantastic job as an
online marketer. Here's some notes:

-- He has a personality that's appealing and unique
-- He tells us about his life
-- He knows his audience
-- He regularly comes up with very creative offers
-- He stays in contact

Hats off to Hank IMO.

--J
"59 Ways to Recession Proof Your Entertainment Business -- FREE!"
http://GetLeadsLikeCrazy.com
Jack Turk
 
Posts: 23
Joined: 09/12/08 12:14 PM

Postby George Olson » 04/09/09 12:46 PM

The address line for genii above, if you'll note is "http://"

is it supposed to be "secure"

GO
George Olson
 
Posts: 980
Joined: 01/17/08 01:00 PM
Location: Tigard, OR

Postby Jonathan Townsend » 04/09/09 01:01 PM

it would say https:// if it were secure.

notice the s
Mundus vult decipi
Jonathan Townsend
 
Posts: 6674
Joined: 01/17/08 01:00 PM
Location: Westchester, NY

Postby chipper35 » 04/10/13 03:56 PM

I know....I know.....I'm a jerk for going here: Am I the only one who catches the irony with this thread?
chipper35
 
Posts: 4
Joined: 07/10/09 11:13 AM
Location: Texas

Postby Richard Kaufman » 04/11/13 07:25 AM

Lots of things seem ironic in retrospect, especially to Hankie, now in the pokie.
Subscribe today to Genii Magazine
User avatar
Richard Kaufman
 
Posts: 20705
Joined: 07/18/01 12:00 PM
Location: Washington DC


Return to Marketing & Magic Business