Today I logged into maybank2u for several times only to get error messages.
While these may be helpful for the admin to troubleshoot problems, it also provides opportunities for hacker to help "solving" the problem as well. That's why in computer security training, developers are reminded to hide error messages. Otherwise, the whole world knows your problems and weaknesses. The worrying part is that public users become "sceptic" of your security assurance.
No comments:
Post a Comment