Aug 212007

In india, they are household names. Surprisingly, these host loads of cross site scripting issues, which went unreported till date. Or, they might be classified as known issues. One of my friends from Grad School, tried to analyse these sites for the layers of security they expose, and results were simply mind blowing. He claims that within 15 minutes, you accounts on these sites can be brought down, and mails can be stolen. He has written more about this in his blog here.

Sharekhan is typically a financial website, so i am surprised that it is also vulnerable so easily. These are all set to loose the credibility.

Sudhir reports that indiatimes is the most easy target of all. This issue has been reported to these sites, but no response yet. There are people can create a havoc out of this.

ashish

  • Sharekhan is typically a financial website, so i am surprised that it is also vulnerable so easily. These are all set to loose the credibility.
  • I have been using Sharekhan for some time now, it did seem so secured but after reading your post I am just so confused.
    Aspects like password change every 14 days, trading passwords for all transactions entered etc showed it to be secured.
    However, apart from the technical aspect they have measures where it is just impossible to withdraw money to a Bank account apart from what you have registered and any mail to the registered mail address.
blog comments powered by Disqus

Switch to our mobile site