RSS
Indian Visa Application Data Easily Accessible Using Old 'Change Number In URL' Trick
from the very-very-secure dept
The folks over at Daniweb have submitted their story about the online visa application system in India. Approximately a year ago, someone who was using the system ran into a problem, where all the work he had done in filling out the application seemed to disappear, and the back button wasn't work. So he tried making small changes to the URL... which gave him access to someone else's visa application. There are plenty of online systems that do this, but you would expect something a little more secure when it comes to government documents that include all sorts of personal info. The guy notified those responsible, and his alert was promptly ignored. It was only after they were contacted a second time, by the person writing the article about it, that they took it seriously enough to finally plug the hole. With governments leaking data all the time, is it any wonder that people don't feel particularly safe when the government wants even more data from us, while promising that there's no way it would ever be leaked?
4 Comments | Leave a Comment..
- DailyDirt: Autonomous Vehicles
- How Publishers Repeated The Same Mistake As Record Labels: DRM Obsession Gave Amazon Dominant Position
- Park Ranger Tases Guy Walking Dogs Without A Leash
- Brazilian Government Ordering Web Hosting Firms To Kill Domain Names They Don't Like
- Syrian President's Email Hacked... His Password Was 12345
Reader Comments (rss)
(Flattened / Threaded)
[ reply to this | link to this | view in thread ]
Giving data to the government...
OK, I'm exaggerating. Let's say a billboard facing away from the highway... but it's got lots of neon on it.
[ reply to this | link to this | view in thread ]
Looks like they have programmers making the mistakes that most of the developers here got past in 1996.
[ reply to this | link to this | view in thread ]
Data leaks
[ reply to this | link to this | view in thread ]
Add Your Comment