craigix
Mega GP Mania
I've accidentally found a major flaw in an online bank allowing me to access other peoples accounts.
This flaw is related to the connected email account and allows a way to hijack other accounts as long as you know the email address of the account holder.
Emailing the bank has given no response. I don't even have an account with the bank in question.
What shall I do? Tweet anonymous?
I should add that I can think of a simple way to use this trick to 'own' and empty accounts set up with the bank.
Edit: I'm considering tweeting pictures of other peoples accounts to get the attention of the bank, but I don't want to be arrested.
This flaw is related to the connected email account and allows a way to hijack other accounts as long as you know the email address of the account holder.
Emailing the bank has given no response. I don't even have an account with the bank in question.
What shall I do? Tweet anonymous?
I should add that I can think of a simple way to use this trick to 'own' and empty accounts set up with the bank.
Edit: I'm considering tweeting pictures of other peoples accounts to get the attention of the bank, but I don't want to be arrested.
Last edited by a moderator: