Learn More
Resend Email
15
Worst security bug/feature you've seen?
Week 25 Group Rant
outofbounds
8y

Work at a banking software company, one bug allowed bankers to book a deal after quote expired. So i could theoretically buy something at yesterday's rate. Dev forgot the "btnBook.enabled=false"

undefined

wk25
Favorite
Ranter
Comments
  • 7
    8y
    If a forgotten frontend disabling of a button can cause that, I'm really worried about the backend
  • 1
    8y
    So I can set that true in front end and can still proceed. Dangerous.
  • 0
    8y
    Welcome to the house of horrors. 😊
    They fixed the backend as well. Some check at the stored procedure they told me! Still cringe worthy that this was reported during VIT 😂
  • 0
    8y
    @outofbounds you would want to look at that procedure.
  • 1
    8y
    Why are you not rich and retired?
Related Rants
devRant © 2021 Hexical Labs LLC
Privacy Policy  |  Terms of Service
Add Comment