A teenager in India has discovered a major loophole in Amazon-owned audio book retailer Audible that allows anyone to download an unlimited amount of audio books for free.
Security flaws in Audible mean the site doesn’t wait to authenticate credit card payments before allowing users to purchase books, meaning that anyone can provide the site with fake information and download an unlimited amount of audio books.
In a video provided to Business Insider, Alan Joseph, a 19-year-old computer science student from Bangalore, India, demonstrated the loophole. Business Insider was able to replicate the technique used by Joseph to download audio books for free.
Using a fake name, fake email address and a fake credit card, users are able to create an account on Audible, and purchase any member program. Business Insider was able to purchase the most expensive membership program, a $229 24-book "Platinum Annual Membership," using fake credit card information.