3 ms·
They say these are common issues - but don't actually link to any websites which have these issues. Disabled input fields are fine - so long as they are ignore
by richardwhiuk 6y ago
They say these are common issues - but don't actually link to any websites which have these issues.
Disabled input fields are fine - so long as they are ignored on the backend - and there's nothing in this article saying they aren't.
Nothing here seems specific to "crypto" websites.
- onra87 6y agoIndeed, but the crypto keyword made us click on the article. Otherwise it would have been quite a common article with some commonsense advices on basic web security...
- introvertmac 6y agoI genuinely tried to complied the issues and yes, most of them are crypto websites. Sorry for any confusion created by the title!
- turminal 6y agoThe fact that makers of those websites are supposedly 'crypto' experts (and should as such probably not be completely ignorant of information security) makes the presence of such vulnerabilities in their websites more appalling than the same vulnerabilities in your average Joe's webapp.
- introvertmac 6y agoSecurity disclosure and private work have some responsible disclosure policies. I've added added the public bug bounty website for the last one!