10:22 Storage of personal data on the example site gibdd Chelyabinsk region | |
| Unfortunately, this is another post about the leaky and the curvature of the sites of state agencies. Managing traffic police in the Chelyabinsk region has decided to go with the times and provide public services through its website - gibdd74.ru. And it turned out as always. So. Hoping to get these very same services go to that page. In addition to the "friendly» URL she greets us with a list of these services: In order to know what a service "State technical inspection of vehicles," go to link and Nazhmaem Burn. Our eyes opened to the wonderful beauty of form already filled by someone fields! Moments of stupor and bewilderment are and we understand that we face personal data of the last user who filled out the form below: In order to verify this - fill the form themselves leftists data. A link again and see before we completed the same form. We do not believe my eyes and still hope to glitch your browser, any cookies, etc. But no, dear reader, another browser will as well. A similar story with the appointments of qualifying examinations and the issuance of driving licenses. But that's not all. Overwrites the URL to the apex / and we get to the login form ORACLE. As you can see from this form, the site UGIBDD Chelyabinsk region used free version of the database Oracle Express Edition, licensed soglasheine (link to it ironically is located on the right) which involves the use of the product only on the development computer. "Why break?» © UPDATE: As it turns out, web-studio that developed the site UGIBDD Chelyabinsk region has no relation to the one described Bagua. I apologize studio Lab.Net. | |
|
| |
| Total comments: 0 | |