Scripting backdoor steals secrets

By not validating user input, major Web sites are opening themselves up to the loss of sensitive customer data.

E-commerce, the buzzword of the new millennium, is changing the way we do business. Nothing can beat the convenience and discounts that can be found on the Internet. Then again, if these e-commerce sites don't mend their ways, they might be giving out more then just cheap airfares and cut-rate deals. They could be sending your sensitive data to a malicious user without your permission, and without their knowledge.

KeyLabs tests have verified a security problem that based on our research is affecting about one third of the Internet's biggest Web sites. Because of lax security, these e-biz sites are allowing malicious JavaScript and ActiveX scripts to be run from their site.

So, once again, it's time to remind you to tighten your security belt because we might be in for a rough ride.

Advertisement

Talkback 0 comments

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • David Braue Can not-so-smart meters help the NBN?
    It was interesting to witness Conroy's recent enthusiasm to spruik the NBN's role in supporting the Smart Grid, Smart City initiative. What a pity that Conroy hadn't yet seen the damning report from the Victorian auditor-general about that state's smart-meter roll-out.
  • Array Can the Telco Reform Act be win-win?
    In the second of our two programs looking at the Senate Inquiry into the Telecommunications Legislation Amendment Bill, we hear from shareholders, bureaucrats and industry groups.
  • Array Has New Zealand's smiling assassin delivered?
    One year into its tenure, how has the new New Zealand Government performed on issues of technology and telecommunications?
  • More blogs »

Tags

Back to top

Featured