Australian teen exposes flaw in public transit site

Share this article:

The actions of an Australian teen, who exposed a website vulnerability affecting the Public Transport Victoria (PTV) website, are currently being investigated by police.

According to a Wednesday article in Melbourne daily The Age, 16-year-old Joshua Rogers alerted PTV on Dec. 26 of the flaw, but received no response until nearly a week later, after a media outlet inquired about the issue.

While the specific flaw that afflicted the site has yet to be divulged, the vulnerability has been deemed one that commonly affects websites. By exploiting the flaw, Rogers was able to gain access to a database of customers of the Metlink public transport online store. Information in the database included names, addresses, phone numbers, dates of birth, partial credit card numbers and senior card ID numbers, The Age found.

Share this article:

Sign up to our newsletters

More in News

Instagram iOS and Android apps vulnerable to session hijacking

Two researchers wrote about the Instagram app for iOS and Android is vulnerable to session hijacking because both send unsecured information through HTTP.

Report: Hackers stole data from Israeli defense firms

A report by Brian Krebs detailed the intrusions, which occurred between Oct. 2011 and Aug. 2012.

Neverquest trojan targets regional banks in Japan

Symantec researchers found a new variant of the banking trojan.