Kickstarter EXPOSES personal information through ignorance of session management

(A) I am NOT Allen Farmello.

(B) CNET posted a link to a PONO kickstarter, and included a session key that Kickstarter SHOULD have known wasn't mine.

(C) When you click the link, you see ALLEN FARMELLO's name and his participation status

(D) NONE of this information should be passed on the URL, but rather stored in server-side memcache referenced only by a web-server generated session id that is not re-used.

Link to CNET story: http://www.cnet.com/news/neil-youngs-reality-distortion-field/

Link in story to PONO Kick: http://kck.st/1lZZOv6

(original link .. too long)https://www.kickstarter.com/projects/1003614822/ponomusic-where-your-soul-rediscovers-music/posts/803045?at=BAh7CDoMcG9zdF9pZGkD5UAMSSIIdWlkBjoGRVRpAmFrSSILZXhwaXJ5BjsGVEkiGDIwMTQtMDUtMDcgMTg6NTQ6MzIGOwZU--36c2c135e21eb5ea3428afbba810bc76f86e284f&ref=backer_project_update