4 ms·
Instawallet's only form of a login was a URL, which Google indexed 1,000s of just last week: http://www.adaptiveglass.com/?p=656 http://www.adaptiveglass.com/?p
by GigabyteCoin 14y ago
Instawallet's only form of a login was a URL, which Google indexed 1,000s of just last week: http://www.adaptiveglass.com/?p=656 http://www.adaptiveglass.com/?p=656
Honestly, I am curious if the security researcher (who alerted them to this problem and then griped out lack of payment in the article) is the person responsible.
- smtddr 14y agoYa know, that blog you linked to - I don't like that he's upset he didn't get a reward for his good deed. He should be just happy to do a good deed, IMHO.
- danielweber 14y agoYeah, if you were expecting a reward, it's not a good deed. I informed some BTC places of security problems a few years ago, and was roundly ignored, although they put the fixes in place, from what I recall. I wasn't upset because I wasn't expecting anything. EDIT Reading that page . . . depending on a URL staying secret as your security? Wow, that is asking for disaster. I don't like to shame people who make security mistakes, but if you are online wallet vendor, shouldn't you have some common sense?
- deleted 14y ago[deleted]