Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Is it OK to hold credit card numbers in cookies? Santander?
From: Rainer Duffner <rainer () ultra-secure de>
Date: Mon, 15 Oct 2012 21:10:47 +0200

Am 14.10.2012 um 17:15 schrieb auto62098873 () hushmail com:

Santander are a joke when it comes to security. Fed up of two years of battling with them to fix issues any other 
bank would have fixed in seconds, things like XSS on login pages etc. Time to hit full disclosure with some of these 
issues in the hope they'll change their game and start to take their customers security seriously:

I had to chuckle.
The Spanish banks gave 100% mortgages to people who could just barely finance the interest at ultra-low rates.
Now, they're taking back those houses and flats, evicting the owners (who can no longer pay) and putting them into 
rented apartments (for slightly less than the interest rates).
The banks were bailed-out by the government, which has now got to be bailed-out by the EU.

Do you honestly think that "customers" actually exist on the radar of those banks?
Hell - who needs customers, when you can have a bail-out?

Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]