5 ms·
Web-Batman - I like that. The thing is, its not even an issue that's difficult to fix and its not as if I broke anything, the security hole is blatantly obviou
by froo 16y ago
Web-Batman - I like that.
The thing is, its not even an issue that's difficult to fix and its not as if I broke anything, the security hole is blatantly obvious.
Basically, the offending form doesn't use SSL or any kind of encryption when people send in private information, which does include sensitive financial information amongst other things.
Given the level of information they require, anyone intercepting that info could easily social engineer things like passwords out of that person, which is why I'm worried about it.
Ah well, at least I tried...
- iuguy 16y agoI'd keep trying to contact them then look at walking away. An SSL-related issue like that is not something you're going to get accused of hacking for reporting. If you're really serious you could contact your local information privacy directorate (in the UK this would be the Information Commissioner's Office - I don't know who it is for the US) and ask them to investigate.