4 ms·
If you think this is bad, there is a horrible security hole in the site of the National Transit Agency. They have the most imbecile password recovery mechanism
by phasnox 7y ago
If you think this is bad, there is a horrible security hole in the site of the National Transit Agency.
They have the most imbecile password recovery mechanism: With only the national id of the victim(cedula) you can recover their password!
I'm not talking about RESETING the password, I mean they sent you the literal password that was set during account creation to ANY email you input.
This is the state and reflection of the incompetence, rot and corruption of our current and past Government.
- orvtech 7y agolovely, I wonder how much the company that did this for them charged
- analreceiver 7y agoNo they don't, I just checked.
- phasnox 7y agoGive me you cedula and I will give you YOUR password.
- octosphere 7y agoYou should report them to Plain Text Offenders[0]. They're doing God's work. [0] https://plaintextoffenders.com/ https://plaintextoffenders.com/ [0] https://plaintextoffenders.com/submit https://plaintextoffenders.com/submit
- warp 7y agoThe SRI (tax office?) publishes convenient CSVs with info on each tax payer, which includes RUC, full name and address. For self-employed people I believe the RUC is the Cedula with "001" appended. So it is easy to look up the Cedula of many people (I moved to Ecuador in 2014, my info is in that file). https://www.sri.gob.ec/web/guest/catastros https://www.sri.gob.ec/web/guest/catastros
- phasnox 7y agoOh god, I just grepped and found myself in there.