MWEB website security flaw exposed account info

jes

jes

MyBroadband Alumnus
Joined
Nov 11, 2009
Messages
11,992
Reaction score
123
MWEB website security flaw

A vulnerability in the MWEB online bill viewing system let subscribers see one another’s invoices, and has been fixed
 
So glad I'm gone from Mweb.

Wonder if they delete their ex-customers' records? :wtf: :eek:

edit : CoJ can definitely take a look at how things done with minimum fuss. Hope that bites them.
 
A reader contacted MyBroadband about the security flaw at 20:00 on Monday, 3 February 2013 and the details of the vulnerability were sent on to Mweb shortly thereafter.
Click to expand...

2014 you mean? Unless their reaction time was terrible.
 
Should have just told MWEB there is a security flaw, then let them submit a form by fax machine for further details, then let them wait a calendar month, then just forget about their fax, let them send another, and another three by email and two phone calls then let them wait another calendar month again and then only let them know what the flaw is.
 
HelterSkelter said:
Should have just told MWEB there is a security flaw, then let them submit a form by fax machine for further details, then let them wait a calendar month, then just forget about their fax, let them send another, and another three by email and two phone calls then let them wait another calendar month again and then only let them know what the flaw is.
Click to expand...
LOL! +1
 
HelterSkelter said:
Should have just told MWEB there is a security flaw, then let them submit a form by fax machine for further details, then let them wait a calendar month, then just forget about their fax, let them send another, and another three by email and two phone calls then let them wait another calendar month again and then only let them know what the flaw is.
Click to expand...
+ 1000
 
as a lot of people here have said COJ should take a page from mweb and learn how to handle a bad site
 
HelterSkelter said:
Should have just told MWEB there is a security flaw, then let them submit a form by fax machine for further details, then let them wait a calendar month, then just forget about their fax, let them send another, and another three by email and two phone calls then let them wait another calendar month again and then only let them know what the flaw is.
Click to expand...

I cannot agree with you more!!!
One of the main reasons I advise anyone to move from Mweb.
 
HelterSkelter said:
Should have just told MWEB there is a security flaw, then let them submit a form by fax machine for further details, then let them wait a calendar month, then just forget about their fax, let them send another, and another three by email and two phone calls then let them wait another calendar month again and then only let them know what the flaw is.
Click to expand...

lol

you could also have let ISPA know ...

But lets give credit where credit is due. Kudos to the guys for fixing the problem on being advised, hopefully the discoverer gets a reward.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X