5 ms·
that is very true, but the media seems to spin it purely against the big bad hackers. Trust me, I love that these companies are finally getting a reality check!
by madmaze 15y ago
that is very true, but the media seems to spin it purely against the big bad hackers. Trust me, I love that these companies are finally getting a reality check! I mean the Citi hack was URL modification. please thats like figuring out if theres http://something.com/2.jpg http://something.com/2.jpg there is probably also 1.jpg and 3.jpg
- maxwell 15y agoDoes anyone know what stack Citi was using?
- seanp2k 15y agoProbably something very large, very expensive, and very custom. I would think something like a custom contract-deal IBM solution. Here is the whatweb output: ./whatweb https://online.citibank.com https://online.citibank.com https://online.citibank.com https://online.citibank.com [200] X-UA-Compatible[IE=EmulateIE7, IE=EmulateIE7], UncommonHeaders[jid], Cookies[JFPWebAppInfo,JSESSIONID], Title[Citibank Online], Country[UNITED STATES][US] Looks like something Java-based. It's fun that sometimes software gets so large that they miss a gaping security hole like this.