Full Disclosure mailing list archives
Re: Major Greek bank sites with SSL vulnerable to XSS and open redirects
From: silky <michaelslists () gmail com>
Date: Mon, 11 May 2009 16:19:49 +1000
On Mon, May 11, 2009 at 10:33 AM, Paul Schmehl <pschmehl_lists () tx rr com> wrote:
--On May 10, 2009 1:08:51 PM -0500 James Matthews <nytrokiss () gmail com> wrote:Why are these banks still using ASP? It's insecure by default!Everything is insecure by default. There is no such thing as secure by default. Those that assume there is are the first to be hacked.
cute (old) opinion, but fairly useless in practice.
Paul Schmehl, If it isn't already obvious, my opinions are my own and not those of my employer. ****************************************** WARNING: Check the headers before replying
-- silky _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Major Greek bank sites with SSL vulnerable to XSS and open redirects xssed (May 10)
- Re: Major Greek bank sites with SSL vulnerable to XSS and open redirects James Matthews (May 10)
- Re: Major Greek bank sites with SSL vulnerable to XSS and open redirects Paul Schmehl (May 10)
- Re: Major Greek bank sites with SSL vulnerable to XSS and open redirects silky (May 10)
- Re: Major Greek bank sites with SSL vulnerable to XSS and open redirects Valdis . Kletnieks (May 11)
- Re: Major Greek bank sites with SSL vulnerable to XSS and open redirects silky (May 11)
- Re: Major Greek bank sites with SSL vulnerable to XSS and open redirects Paul Schmehl (May 10)
- Re: Major Greek bank sites with SSL vulnerable to XSS and open redirects James Matthews (May 10)
- Re: Major Greek bank sites with SSL vulnerable toXSS and open redirects Mike N. (May 11)