3 ms·

> Mr. Hiranya Samarasekera said that the project was developed by a group of volunteers and offered to ICTA for free. Storing the location of all of your citiz

by Closi 6y ago

> Mr. Hiranya Samarasekera said that the project was developed by a group of volunteers and offered to ICTA for free. Storing the location of all of your citizens in a system that was developed by volunteers for free with little evidence of code review... And they thought that this was a good defence?! I wouldn’t be totally surprised if the volunteers were another nation state.

_vghb 6y ago
Yes, there should have been more pen testing and reviews before such an important service was released storing lot of personal information. I'm happy I was able to find the vulnerability within 4 days of it's public release