Computing in the real world
SEARCH FOR: IN:
Guest  Level 00    Register Log in

News 

[PSUs]
Wednesday 4th October 2000
Security gaffe double-bill 4:02PM, Wednesday 4th October 2000
The Web site of high-street retailer Woolworths is still off-line today, following a security incident which emerged late last week.

The glitch caused personal information of two customers, including addresses, telephone numbers and credit card details, to be published on the company's Web site. A spokesman for Woolworths said this morning that there have been no reports of the credit cards being used fraudulently, and that the customers concerned have already arranged for them to be cancelled.

The cause of the incident is still unknown, but Woolworths has taken the rather extreme step of shutting down its Web server altogether. "We don't want to reactivate our Web site, only for the problem to re-occur a few days later," said the spokesman.

As with the Powergen fiasco last month, in which customers' credit card details were also made available on the company's Web

 
 
ADVERTISEMENT
site, this appears to be the result of internal incompetence rather than a deliberate hacking attack. While the radical measures taken by Woolworths are intended to restore faith in the company's security, the fact that correcting a vulnerability should require the entire Web site to be taken offline - and for such a prolonged period - hardly inspires confidence.

According to Woolworths, the Web site will remain unavailable until the cause of the problem has been identified and rectified, but the spokesman could not give an indication of how long this might take.

Meanwhile, Barclays is rapidly gaining a reputation as the Fawlty Towers of online banking. The bank is at the centre of another row over security.

After logging out of its Internet banking service, a customer was perturbed to discover that she was able to re-access her account by clicking the 'back' button - she was not asked to re-enter her password.

A spokesperson for Barclays said that customers are told to log off and clear their browser's cache after using the online banking service, and that it does not consider this to be a security flaw. Nevertheless, security experts agree that this sort of data shouldn't be stored in a persistent manner at all, and that Barclays' recommended 'workaround' is wholly unacceptable.

Joel Harrison

Submit to: Digg  |  Slashdot  |  Del.icio.us  |  Technorati

Related News


Woolworths on eBay
Great prices on paper & ephemera. Feed your passion on eBay.co.uk.
Woolworths UK Online Store
Woolworths official store. Shop online for great prices and a huge range of toys, music, DVD's, games, books, electricals, mobiles and more.

Woolworths on eBay
Great prices on paper & ephemera. Feed your passion on eBay.co.uk.
www.ebay.co.uk
Woolworths UK Online Store
Woolworths official store. Shop online for great prices and a huge range of toys, music, DVD's, games, books, electricals, mobiles and more.
www.woolworths.co.uk
Compare Broadband
Broadband?
Compare 50+ packages
Enter your postcode below:
Powered by:
Top 10 Broadband
Bookstore Top 5

Columns

Prolog:

Tim Danton puts his safety at risk by standing between the internet bullies and Microsoft. › See full Opinion