Melbourne schoolboy exposes security flaw in Public Transport Victoria's website

 

News article: Melbourne schoolboy exposes security flaw in Public Transport Victoria's website

A Melbourne schoolboy has exposed a security flaw in the website of Public Transport Victoria (PTV), the government authority that provides details about train, bus and trams.

  waynes Junior Train Controller

Location: Victoria
A Melbourne schoolboy has exposed a security flaw in the website of Public Transport Victoria (PTV), the government authority that provides details about train, bus and trams.

Joshua Rogers, 16, says he found the database of people who used the old Metlink online store by chance.

The database includes names, phone numbers and credit cards.

The teenager says he stumbled across the problem while browsing the website.
Melbourne schoolboy exposes security flaw in Public Transport Victoria's website


View the full story

Is Metlink the same as the myki database?

Sponsored advertisement

  Braddo Deputy Commissioner

Location: Narre Warren
Wow... I knew PTV were a bunch of incompetent pricks, but this is just unbelievable.
  Valvegear Oliver Bullied, CME

Location: Richmond Vic
And we have now heard that some idiot cop wants to charge this young bloke. He should be immediately put on to the PTV payroll; he's obviously the only one who knows what security means.
  X'Trapolis-904M Deputy Commissioner

Location: Melbourne
And we have now heard that some idiot cop wants to charge this young bloke. He should be immediately put on to the PTV payroll; he's obviously the only one who knows what security means.
Valvegear

PT> Are BAD COPPERS Put this kid on the payroll He can protect The PC's Wink
  Simbera Train Controller

View the full story

Is Metlink the same as the myki database?
waynes

No: "Customers can rest assured that the database is in no way linked to Myki online accounts and no useable credit card details were stored in the database."

Pretty inexcusable that this was still even online, given that it's no longer used and should have been destroyed. Even more inexcusable that they want to charge the kid for doing them a massive favour.

Sponsored advertisement

Display from:   

Quick Reply

We've disabled Quick Reply for this thread as it was last updated more than six months ago.