5 ms·

Apparently they hired these guys to help with "protection against cyber attacks" http://www.conosco.com/case-studies/moonpig-outsourced-it/ http://www.conosco.

• dabeeeenster 12y ago
  Their first "solution": Fixed price outsourced IT department
  • georgemcbay 12y ago
    To be fair, the complete security failure outlined in the article is at the app level and not something I'd expect most IT departments to bear responsibility for (unless they were directly consulted about how good of an idea using basic auth with hardcoded credentials is and gave an OK on it). Of course, I wouldn't be too surprised if the app/API here were also outsourced to a low fixed price development shop.
• dyadic 12y ago
  It's worth pointing out that the case study is from 2007, there's a good chance that this company is no longer involved and likely wasn't involved in building the API for apps and the security on them.
  • bbcbasic 12y ago
    In any case, once this is out, they will have to take the Moonpig case study from their site.
    • flurdy 12y ago
      Yup that link is now 404