Re:HTTPS on Your Landing Page Is Important
by madaxe_again on Thursday December 14, 2017 @02:19AM
(#15920513)
This being NatWest the penny probably still hasn’t dropped, and they’re probably trying to get him arrested for “hacking our internet”. I doubt they’ll actually implement a change. The general approach in the UK has been to not blame banks at all for poor security, and to punish anyone who finds a security issue severely.
Re:HTTPS on Your Landing Page Is Important
by ZoFreX on Thursday December 14, 2017 @05:05AM
(#15921146)
NatWest are particularly terrible. Last time I checked, in-branch they were still using Internet Explorer to visit an http (not https) site on their intranet to launch via Java Web Start a thin client to log in to their (I assume) mainframe to actually do things.
There's a number of places in that chain of events that something could go nastily wrong, despite them owning every part of that chain.
Re:HTTPS on Your Landing Page Is Important
by sp8 on Thursday December 14, 2017 @05:09AM
(#15921161)
I was in branch the other week and they were doing exactly that... from Windows XP. Staff member told me they were upgrading to Windows 10 soon and they couldn’t wait.
Re:HTTPS on Your Landing Page Is Important
by wruza on Wednesday December 13, 2017 @10:10PM
(#15919654)
Authority is a bad thing here, since the person who spoke to him is in a shadow of his own tech team authority. Don’t get me wrong, but if there is an objective security/xyz problem, then it doesn’t matter who’s reporting it and what does he make for a living.
Re:HTTPS on Your Landing Page Is Important
by volgo on Thursday December 14, 2017 @05:30PM
(#15927823)
I've never heard of him, and probably so haven't a lot of people on Twitter. I don't see why we should give him authority
[dead]
It seems that every time Troy interacts with a company on Twitter, they never seem to click on to who he is, until it's probably too late and they look like fools.
It's just so amusing to see companies trying to condescend to Troy, when he's one of the most visible authorities on web security on the planet (not necessarily the most authoritative, but the most well known).
I occasionally get this when people try talking to me about computer science topics, when they don't realise that it's what I do for a living. I've probably done the same myself when talking to Doctors and other domain experts, I'm sure.