3 ms·
Similar thing with my doctors in the UK . I found their online prescription renewal system allowed me to access other people’s prescriptions. I warned them abo
by qz2 6y ago
Similar thing with my doctors in the UK . I found their online prescription renewal system allowed me to access other people’s prescriptions. I warned them about this and they threatened to report me to the police. I found this out because I couldn’t click the link in my mail client on my phone at the time so I typed the URL in incorrectly on my desktop PC.
So I moved doctors and reported them to the ICO. Never heard anything back but their web site disappeared for a month after a couple of weeks. I’d like to think they were fined but I don’t think that actually happened.
This was some piece of shit they had paid a local web design company, the lowest bidder, to put together. It was PHP, hosted in the USA on a shared server and didn’t even have TLS enabled.
- glaucon 6y agoYou certainly seem to have had reasons to be concerned but suggesting that a piece of software is inherently vulnerable because it's written in PHP has no basis in fact.
- deleted 6y ago[deleted]
- qz2 6y agoIt was scene setting. While you can do it, there’s a lot of terrible terrible nasty hellish PHP out there. The whole thing is a foot gun. I spent 5 years fixing various messes written in it for people as a contractor in the mid 00’s.