Perhaps fixed. It is quite prevalent among developers. Article below explain somehow. http://www.isaca.org/Journal/Past-Issues/2008/Volume-4/Pages/Secure-Software...
Message: 1 Date: Mon, 9 Feb 2015 11:31:09 +0300 From: James Muendo <timrick@gmail.com> To: "Allan O." <allayy@gmail.com>, Skunkworks Mailing List <skunkworks@lists.my.co.ke> Subject:
Re: [Skunkworks] NCC Mobile County App Security Message-ID: <CAOM_f7aN9W_-dnEnxAvXE--Dn3u1dj= qnp-hUQFYYWGpdhJvFA@mail.gmail.com> Content-Type: text/plain; charset="iso-8859-1"
Hi,
Looks like they patched.
Regards
On 9 February 2015 at 10:31, Allan O. via skunkworks < skunkworks@lists.my.co.ke> wrote:
Looks like they've taken measures to resolve those issues?
On Sat, Feb 7, 2015 at 3:23 PM, John K. via skunkworks < skunkworks@lists.my.co.ke> wrote:
Anyone know the dev's of the Nairobi County App at JamboPay? Need to notify them of some serious security concerns in their app. Seroius to the point that I won't use the app until they are patched.
And if anyone on this list uses it, please don't use the same PIN you use for other secure services like Mpesa, atm etc until these issues are patched.
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- James M. Muendo
P.O Box 28016 - 00200, Nairobi. Mobile: +254725 567 508 Skype:tim.rick | Twitter: @MMuendo | gtalk: timrick | Web: www.muendo.co.ke <james@muendo.co.ke> <http://muendoshead.blogspot.com/>