Podcast 186 - They just don't get it...

[mungewell 7]

Interesting Podcast, however you focused on faults noticed with deliberate 'probing'.

There are some issues that (to the hacker mind) just stand out a plain stupid and when you attempt to explain why you just get that glazed expression. In my experience you just have to give up, or label yourself as behaving 'suspiciously'.

Example - bank site whose standard operating proceedure effectively *removes* password from e-banking account under certain circumstances.

Tried to explain, they just didn't get it....

Edited February 16, 2007 by mungewell