Wow. Amateur level crap.
New: A social media boosting service has exposed thousands of Instagram account passwords. The boosting site stored passwords in plaintext, which are visible simply by viewing the website's source code. Worse, anyone could view anyone else's password.https://tcrn.ch/36HWccW
-
-
- Još 4 druga odgovora
Novi razgovor -
-
-
In case you were wondering, yes, it was this.https://twitter.com/zackwhittaker/status/1222596975041839106 …
Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
Note that the defense they offer is that the vuln was introduced recently due to a mistake in the authentication process, and ignores that storing passwords in plaintext is a severe underlying error that would have seriously reduced the harm of any vuln like this.
-
Without plaintext passwords, this would be about leaking billing addresses of premium users, and disclosing who has used this boosting service. Still a privacy harm, but nowhere near as egregious. Given how successful credential stuffing can be, plaintext passwords are gold.
Kraj razgovora
Novi razgovor -
-
-
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
That is, without a doubt, the most ridiculous thing I've read all day. I'd potentially say "all week", but there's been a fair amount of ridiculous going around.
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
... They walk among us!
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
Tweet je nedostupan.
-
-
May I just say WTF...
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.