Accidentally found a flaw in major online bank...

[Mr_Loon]

We have a reply

Will Craigs next post be from a Carribean Island which he now owns or from Wormwood Scrubs?


Seriously though, how much 'poking about' did you have to do to find this flaw?


Hope the bank are suitably contrite. Also think you should notify someone, you'd hope that reputable financial journalists would be interested in such a story. Could be that more than 1 bank is using a similarly weak system.

 

[Linux-SWAT]

The security in bank's computer systems is a joke.


Students of mine worked there, and theirs stories were unbelievable.

 

[Green7]

lol unbelievable


Yeah, I'd believe that.

 

[craigix]

The bank wants me to prove who I am!

 

[Linux-SWAT]

Troubles ahead.

 

[Green7]

We've been there before.


Not sure if serous. jpg

 

[craigix]

We have a reply

Will Craigs next post be from a Carribean Island which he now owns or from Wormwood Scrubs?


Seriously though, how much 'poking about' did you have to do to find this flaw?


Hope the bank are suitably contrite. Also think you should notify someone, you'd hope that reputable financial journalists would be interested in such a story. Could be that more than 1 bank is using a similarly weak system.

I did next to no poking about, this all happened due to someone else's mistake and from a joke between me and my girlfriend, and then stunned silence as we had full access to their account.

 

[Linux-SWAT]

Take their money and run.

 

[Green7]

So, to recap, you have found a flaw in a, I assume, a major banks website. You then come on to your own website and announce the fact you've found a flaw?


lol


Are you drunk?

I hope no one who has invested in your start up is listening.


Mental

 

[craigix]

Why is it mental to document it?

 

[Linux-SWAT]

So tell us exactly what is this exploit.

 

[Green7]

Go to bed Craig.

 

[craigix]

So tell us exactly what is this exploit.

I'm not posting the exploit until it's fixed, but it's a very typical one from what I've read online.

Go to bed Craig.

Why? What does this have to do with you? You're clearly are just here to troll. Go away.

 

[Linux-SWAT]

So tell us exactly what is this exploit.

I'm not posting the exploit until it's fixed, but it's a very typical one from what I've read online.

On which site ?

 

[craigix]

I'll just tell the whole story here.

 

[Green7]

Craig, I feel like I know you.


Been there since the GP2X days. A lonely heart ad in b3ta, next thing I'm coding retro games for an audience.


Loved it.


Followed you through the design phase of the Pandora. Hit refresh on release day like I hated my index finger.


The mentalism of the bank refusing money....


But Sir, this is a bridge too far.


We are now into the realms of madness or/and bitterness. I'm actually hoping it's bitterness as madness and money leads to a road you cannot escape.


Good luck

 

[McLovin]

aliens! wtf?

 

[Scntrblob]

Go to the bank in person and demand to speak an official.


Posting here is just weird. I wonder if some justification for more delays will grow out of this...

 

[craigix]

It isn't a UK bank. I'm simply documenting it here so I don't get accused of discovering this on purpose.


'I wonder if some justification for more delays will grow out of this..'


Seriously? I'm not even in control of the Pandora production anymore. This isn't even in the Pandora section.

 

[Linux-SWAT]

You will simply attract vultures.


Remember the french guy who discovered how to create working credit cards, he was in security trouble because bad guys wanted to kidnap him.


--Edit:


At least, you can hide on your roof ^^.