OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [Full-disclosure] Major Greek bank sites with SSL vulnerable to XSS and open redirects

From: Paul Schmehl (pschmehl_liststx.rr.com)
Date: Sun May 10 2009 - 19:33:03 CDT

--On May 10, 2009 1:08:51 PM -0500 James Matthews <nytrokissgmail.com>
wrote:

>
> Why are these banks still using ASP? It's insecure by default!

Everything is insecure by default. There is no such thing as secure by
default. Those that assume there is are the first to be hacked.

Paul Schmehl, If it isn't already
obvious, my opinions are my own
and not those of my employer.
******************************************
WARNING: Check the headers before replying

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/