Ogero's Website Security: Epic Fail

Ayman · 2010-01-03T15:56:22+00:00

Hey, today I was surfing Ogero's website after I saw how much I have spent from the quota for this month and so I thought I would take a look at the source....

Flakk

they store them on excel sheets because of the stupid customer support team that only knows how to copy and paste and yell on the telephone " b3atelna email!" and obviously nothing happens.

Tempto

Flakk wrotethey store them on excel sheets because of the stupid customer support team that only knows how to copy and paste and yell on the telephone " b3atelna email!" and obviously nothing happens.

This is so true omg. I cannot say how many times some stupid customer support did that exact same thing to me :o

Joe

I cannot believe what I just read! I knew we were bad in Lebanon, but not to that extent!

BTW I have a minor in System Security, and here are some facts:

- Yes, md5 has been cracked but it is still considered acceptable to a certain extent. (Try to crack arithma's example or this one 86ea666ce39aeff981fd8a5f160e0c70).

- Fake certificate are easily discoverable, but beware to check for the right url when connecting. You'll be surprised at how much man in the middle attacks happen this way.

- Recently a 56-bit RSA encryption key has been cracked. And a student in Berkley cracked a 40-bit key in less than 4 hours.

- Encryption keys longer than 128 bits are considered a weapon in France and therefore are illegal. (Not that it's stopping anyone from using them).

- Since 9/11 it is illegal for us (foreigners) to go to the US with crypted data on us.

Isp_fap

-Database may be much more secure. (Hardware, more algorithmic processing done, you dont know whats happening behind the webserver)
-MD5 is not useless.
-Javascript algorithm on ogero is useless.
-HTTPS should be used.
-There are more advanced URL spoofing attacks than fake certificates.(i.e.DNS cache poisoning,etc)
-It's not illegal to have encrypted data, its against human rights.

« Previous Page