Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v7.2 "BoringSFM"
 
  • Locked thread
Varkk
Apr 17, 2004

 Cross posting from NZ politics thread

http://www.joshbrodie.co.nz/2014/08/08/conservative-party-web-security.html

quote:

The username and password were already typed in when I arrived at the page. This is not so good.

The username is 'colin' and the password was (this has been changed since) 'colin' followed by three numbers. This is all quite bad.

With these credentials prepopulated, a user can only assume that this part of the website is NOT restricted and continue forth!

This allows any random visitor to the website to modify all of the website's content. This is not the least secure part of the website.

I am having a very hard time understanding how you can get a website so staggeringly wrong.

* # ¿ Aug 8, 2014 11:33
  • Quote
Adbot
ADBOT LOVES YOU

# ¿ Apr 28, 2024 23:49
  • Quote
  • Locked thread
The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v7.2 "BoringSFM"