full-disclosure - Re: Major Greek bank sites with SSL vulnerable to XSS and open redirects

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sun, 10 May 2009 19:33:03 -0500
From: Paul Schmehl <pschmehl_lists@...rr.com>
To: full-disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: Major Greek bank sites with SSL vulnerable
 to	XSS and open redirects

--On May 10, 2009 1:08:51 PM -0500 James Matthews <nytrokiss@...il.com> 
wrote:

>
> Why are these banks still using ASP? It's insecure by default!

Everything is insecure by default.  There is no such thing as secure by 
default.  Those that assume there is are the first to be hacked.

Paul Schmehl, If it isn't already
obvious, my opinions are my own
and not those of my employer.
******************************************
WARNING: Check the headers before replying

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/