No replies to this topic

[bspirovski]

More for fun then for business, a list of the most bizarre security incidents i witnessed

• An organization had a secure site where the log off button simply navigates the visitor off the main page, but does not tear down or in any other way disconnect the session. Until the browser is not off, you can use the back button to go back and continue work with valid credentials.
• A security savvy user sent an encrypted file via public e-mail , and then sent the decryption key in another clear text e-mail, with a subject line: "Password".

Read the entire text
http://www.shortinfo...n-security.html

Regards