Post

It looks like W Identity, the part of @wsocial.eu that checks your papers before you go in, has a very basic XSS on its admin backend, found hours after launch. This seems almost too predictable... Cyberfriends, any thoughts on how bad? 23.social/@kantorkel/1...

23.socialkantorkel (@kantorkel@23.social)#widentity ist ein digital identity provider, der ein geschäftliches Interesse an einem Internet hat, das möglichst wenig anonym ist. Nebenbei basteln sie an #wsocial, um Identitäten einzusammeln htt...

Alexandre Plennevaux 🇧🇪🇪🇺

@pixeline.be

18 June

such a rookie mistake... This is amateurish @wsocial.eu cc @vonderleyen.ec.europa.eu @president.ecb.europa.eu

Tim Trautmann

@timtrautmann.com

18 June

As far as I know, they outsourced engineering to war-torn Ukraine because it's likely too expensive to build in the EU. Not that that is necessarily a bad thing; the Ukrainians need all the support they can get.

Robin Berjon

@robin.berjon.com

18 June

Outsourcing to Ukraine is perfectly fine IMHO. But you need to handle identity with care no matter what.

Tim Trautmann

@timtrautmann.com

Agreed. There are some incredibly talented developers in Ukraine. But there are also pretty bad actors selling their services at rock bottom prices. I wonder who the vendor is that they chose for this.

18/6/26, 9:53 am0 reposts4 likes

No replies yet.