> Each of these mule recruitment sites had the same security weakness: Anyone could register, and after logging in any user could view messages sent to and from all other users simply by changing a number in the browser’s address bar. As a result, it was trivial to automate the retrieval of messages sent to every money mule registered across dozens of these fake company sites.
Law enforcement already masquerades online as underage girls and boys, potential terrorists searching for bomb-making materials, etc.
What "legal firewalls" would prevent them from walking a URL to see what companies are about to get robbed?
And forget about law enforcement, why wouldn't banks and payroll services do the same thing to protect their customers?
It's beyond ridiculous that our only line of defense is Brian Krebs.
Law enforcement already masquerades online as underage girls and boys, potential terrorists searching for bomb-making materials, etc.
What "legal firewalls" would prevent them from walking a URL to see what companies are about to get robbed?
And forget about law enforcement, why wouldn't banks and payroll services do the same thing to protect their customers?
It's beyond ridiculous that our only line of defense is Brian Krebs.