News for hackers. Stuff that matters.
Re:Man overcharged 20 rupees for India train ticket wins 22-... by 2Gkashmiri on Friday August 12, 2022 @09:38AM (#32438457)
you wanna know a secret? well when indian income tax department announced a new web portal, they made a big deal out of it but guess what, they still haven't gotten the memo how incompetent they are and that they know it and don't care.

case in point, www.incometax.gov.in works but incometax.gov.in does not.

haven't you learned in domain setup tutorials to set your A records straight? i guess they didn't and its been like 1.5/2 years and its still a problem. go figure

Re:Man overcharged 20 rupees for India train ticket wins 22-... by jopython on Friday August 12, 2022 @10:00AM (#32438782)
Talking about incompetence, Why are most Indian government websites look like they were designed in the 90's?
Re:Man overcharged 20 rupees for India train ticket wins 22-... by thumbsup-_- on Friday August 12, 2022 @10:11AM (#32438924)
Because they were either designed in 90s or are being approved by people who are stuck in 90s. Like you still can’t use back/forward buttons, paste text on many indian gov websites
Re:Man overcharged 20 rupees for India train ticket wins 22-... by petesergeant on Friday August 12, 2022 @10:26AM (#32439176)
one of my least favourite things about the GCC countries is an apparent enduring fascination with disabling paste on password fields
Re:Man overcharged 20 rupees for India train ticket wins 22-... by 2Gkashmiri on Friday August 12, 2022 @10:23AM (#32439116)
at least on the banking side, i do suppose that is a good thing.

looking at all the scammer payback videos, most of the scammers take your remote tool, make you open the banking website and then they edit the source, reload and here is your money. Indian banks don't let you do that, they make you give an OTP for every transaction, if you reload, you get logged out, you can't paste or open inspect element which actually makes these scams very very difficult on indian netbanking customers....

that makes me wonder,why don't american banks have reload security for one? like if you reload a page it should log you out?

Re:Man overcharged 20 rupees for India train ticket wins 22-... by Tijdreiziger on Friday August 12, 2022 @10:41AM (#32439378)
> Indian banks don't let you do that, they make you give an OTP for every transaction, if you reload, you get logged out, you can't paste or open inspect element [...]

I don't see how these four things are related. Banks in the Netherlands require 2FA (i.e. smartphone or dedicated 2FA device) for every transaction, but this does not prohibit you from pasting an account number or reloading the page.

In particular, I don't see how opening the developer tools and reloading the page are related. If you reload a page, changes you made using the developer tools are lost.

Re:Man overcharged 20 rupees for India train ticket wins 22-... by martin_a on Friday August 12, 2022 @10:48AM (#32439476)
> like if you reload a page it should log you out?

why would you do that? reloading is a normal process, what if you are on a bad connection and sometimes files don't load? you hit reload and now everything works...

Re:Man overcharged 20 rupees for India train ticket wins 22-... by 2Gkashmiri on Friday August 12, 2022 @10:20AM (#32439065)
wanna know more about this incometax.gov.in url that doesn't even work without www.incometax.gov.in ?

apparently the government spent like INR 4500 Crores or almost $ 500 Million US building this.

it regularly crashes, has weird bugs, half the website doesn't work most of the time....

Re:Man overcharged 20 rupees for India train ticket wins 22-... by samarthr1 on Friday August 12, 2022 @01:23PM (#32441507)
It's changing slowly tbh.

Some stuff still uses the LCB look ASP.net, but the newer .nic websites seem to be much better done.