4 ms·
All the images still exist on their website: https://www.locationsmart.com/cms/resources/ https://www.locationsmart.com/cms/resources/ Look for 't-mobile' or
by hadrien01 8y ago
All the images still exist on their website:
https://www.locationsmart.com/cms/resources/ https://www.locationsmart.com/cms/resources/
Look for 't-mobile' or 'verizon'
- nneonneo 8y agoOh wow, I can't believe they left all their CMS resources on open listing...that's quite a find. Their website reports that the "trylocationsmart500x250-w500h250.png" file, which is a screenshot of an older version of the vulnerable website, was uploaded 2016-09-14 22:20. This means that the vulnerable site was probably available since at least September 2016.
- jessaustin 8y agoIt seems less and less likely that this firm has ever hired any knowledgeable security person...
- yorwba 8y agoI think this image symbolizes their approach to security very well: https://www.locationsmart.com/cms/resources/privacysecurity.png https://www.locationsmart.com/cms/resources/privacysecurity.... Just put a lock on top, even if it's not actually securing anything.
- che_shirecat 8y agowell they're definitely getting a comprehensive, free-of-charge penetration test now