I’d laugh if it wasn’t so embarrassing: [Archive.is] Troy Hunt: Reckon you’ve seen some stupid security things? Here, hold my beer….
It reminds me of a Dutch agency with > 1 million low income people paying for a service to be on a notification list for rental houses becoming available that was within their legal rental limits.
If you were not on the list, you’d never gain enough points to get a rental home at all.
If you were on the list, then they’d sent your credentials in plain text requiring very limited information.
Your credentials then would reveal name, date of birth, social security number, full address, bank account and some other personal information.
They never notified me if the security complaint I filed was ever addressed.
–jeroen
via:
[WayBack] Ready for some security nightmares? – This is why I Code – Google+