Two more instances of Sprint’s insecure online system:

1) Members of the Howards Forums cellphone message boards have discovered a URL hack that lets users add the “Unlimited Shared Night & Weekend Minutes at 5pm pack” for free to their account.

2) If you take this URL and replace the phone# at the end with the phone number of someone who hasn’t set up the PIN on their account, you will see the last 4 digits of their social security number. Not a huge deal, we give out the last 4 of our social over the phone all the time, but it seems a bit odd to broadcast these numbers unnecessarily.

PREVIOUSLY: Flawed Sprint Security Worse Than We Thought
Flawed Security Lets Sprint Accounts Get Easily Hijacked

Want more consumer news? Visit our parent organization, Consumer Reports, for the latest on scams, recalls, and other consumer issues.