|
The New Zealand Herald reported yesterday that two "computer savvy
14 year-olds" had discovered a method for accessing user-accounting
records on Xtra.
According to the story by Chris Barton, the boys had worked out
how to access the information for any account through simple
analysis of the URL that pointed to their own online information.
Xtra's service development manager, Nevin Grieve reported as
being sorry the situation had occurred and that immediate action
had been taken.
As an interim solution, Xtra has disabled online access to the
accounting information and Grieve says "we're also in touch
with our software supplier."
Related stories:
Do you want to link to this page? |