Rain fixes website flaw that left personal data exposed

[Bradley Prior]

Rain fixes website flaw that left personal data exposed

Rain has fixed a security flaw in its website that allowed subscribers, who were logged into their online profiles, to view the invoices of other clients.

A MyBroadband reader discovered the flaw after Rain emailed a notice to subscribers who had not set a spend limit on their accounts.

 

[r00igev@@r]

Eish! Internal security team????

 

[MirageF1]

/rolleyes

Am I surprised though. No.

 

[Thor]

And they want to run a bank...

 

[Swa]

I thought they fixed this months ago already?

 

[SauRoNZA]

And they want to run a bank...

They do?

Same venture capital source does not amount to same people running the show.

 

[Thor]

They do?

Same venture capital source does not amount to same people running the show.

The VC in this case does a little more than just raise capital.

 

[SauRoNZA]

The VC in this case does a little more than just raise capital.

Yes certainly, but it’s not like both companies have the same board and technical staff complement.

Likening them to each other is a bit of a stretch.

They aren’t integrated on any level.

 

[DXL]

Maybe RAIN must set a default of R500 for all new Accounts and when the customer changes that then its his responsibility to pay up.

R500 should cover Off Peak Data and some Peak .............Its being proactive to your customers.

Then they know you have their best interest at heart and not trying to pull a EmpTyN or Vodacon on them.