Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror

Slashdot videos: Now with more Slashdot!

  • View

  • Discuss

  • Share

We've improved Slashdot's video section; now you can view our video interviews, product close-ups and site visits with all the usual Slashdot options to comment, share, etc. No more walled garden! It's a work in progress -- we hope you'll check it out (Learn more about the recent updates).

×
Security

+ - Easy CSRF attack changes Menshn.com user's password, "100% secure" claim owners-> 1

Submitted by Anonymous Coward
An anonymous reader writes "Menshn.com, a half baked twitter esq service has had security issues in the past (see http://www.theregister.co.uk/2012/06/25/menshn_security/). Now a CSRF attack allows any third party site to change a logged in Menshn.com users password has been demonstrated to 'The Register'. When this was reported the owners (current politician Luke Bozier and former politician Louise Mensch) they had the folling reactions:

"Not true at all. Menshn is 100% secure. There has never been a CSRF attack and I'm sure I know how to Google what that is," Bozier said in a Twitter message.

Mensch added: "Passwords are encrypted: HTTPS."

Again it seems the technically clueless are ignoring the "snippy geeks""

Link to Original Source
This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

Easy CSRF attack changes Menshn.com user's password, "100% secure" claim owners

Comments Filter:

You scratch my tape, and I'll scratch yours.

Working...