PayPal Security Issue #1One of a series of weaknesses in PayPal’s two-tier security system, that can lead to access of funds, or a DoS attack, given only an account and captured password, or an unclosed browser with an uncleared cache where a user has logged off.
Read here: PayPal Security Issue #1
More coming, once I get my test account unlocked.
Publishing publicly since, if I know this, best to assume many hundreds of black-hat, malicious people know it as well and are exploiting it.
The fixes are very, very easy. I hope this will goad PayPal into fixing this problem.
Saturday November 19th
Bumper-stickers are either to tell people what they should think, or what you think. These photos make me think.
So here’s a “bumper-sticker” blog post.
Monday October 24th
This post has been moved to the Rob Vaughn Security blog at:
“Remove Yourself from Background Check Sites”.
Welcome Back, BloggerLet’s try this for the fourth time…
Thoughts about technology like CoffeeScript, looks cool; the Groovy programming language, really cool!
Stay tuned, if you have nothing better to do… :DÂ Cheers!
Tuesday August 9th