I thought we did things right until I went looking - Security errors in Norwegian websites
summary
Researcher uses Firefox Developer Tools to inspect GET requests and cookies and finds that after about 15 requests three occurrences of other users’ data leak intermittently from a popular Norwegian newspaper site; another case shows predictable incremental customer IDs exposing invoice lists and PDF links (access works if the account logged in within the last hour) forcing the power company to take the site offline for a week; an eyewear shop has persistent cross-site scripting fixed within 16.5 hours and rewarded with a 3,000 NOK gift card.
AI-written summary · about
chapters (4)
- 0:00Introduction
- 0:35A popular Norwegian newspaper
- 2:39A big power company
- 4:57A big sunglasses company
related talks
01h 11mThere Was Not a Breach; There Was a Blog
48mRegulation and Risk When Your Customer’s Browser Leaks Data
01h 00mHack to the Future
29mYour Scripts In My Page - What Could Possibly Go Wrong?
28mLearning from High Profile Failures
56mDon't worry, your credit card details are safe. BTW your kid is missing!
33mHacking The Front-End
19mLive Hacking Session Part 1