Full Disclosure mailing list archives
Re: Is it OK to hold credit card numbers in cookies? Santander?
From: klondike <klondike () klondike es>
Date: Mon, 15 Oct 2012 20:47:48 +0200
El 14/10/12 17:15, auto62098873 () hushmail com escribió:
Santander are a joke when it comes to security. Fed up of two years of battling with them to fix issues any other bank would have fixed in seconds, things like XSS on login pages etc. Time to hit full disclosure with some of these issues in the hope they'll change their game and start to take their customers security seriously:
Not the only ones out there, Bankia also has security issues which according to their last audits aren't there :facepalm: I'll probably disclose them later on the future since they seem to consider them not so important.
Attachment:
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Is it OK to hold credit card numbers in cookies? Santander? auto62098873 (Oct 15)
- Re: Is it OK to hold credit card numbers in cookies? Santander? klondike (Oct 15)
- Re: Is it OK to hold credit card numbers in cookies? Santander? Rainer Duffner (Oct 15)
- Re: Is it OK to hold credit card numbers in cookies? Santander? Alexander Georgiev (Oct 16)
- Re: Is it OK to hold credit card numbers in cookies? Santander? Christian Sciberras (Oct 16)
- Re: Is it OK to hold credit card numbers in cookies? Santander? Alexander Georgiev (Oct 16)