Australian teen exposes flaw in public transit site

Share this article:

The actions of an Australian teen, who exposed a website vulnerability affecting the Public Transport Victoria (PTV) website, are currently being investigated by police.

According to a Wednesday article in Melbourne daily The Age, 16-year-old Joshua Rogers alerted PTV on Dec. 26 of the flaw, but received no response until nearly a week later, after a media outlet inquired about the issue.

While the specific flaw that afflicted the site has yet to be divulged, the vulnerability has been deemed one that commonly affects websites. By exploiting the flaw, Rogers was able to gain access to a database of customers of the Metlink public transport online store. Information in the database included names, addresses, phone numbers, dates of birth, partial credit card numbers and senior card ID numbers, The Age found.

Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

More in News

As EMV deadline looms, industry looks to next ATM attack front

As EMV deadline looms, industry looks to next ...

Next year, EMV migration in the U.S. will inevitability change fraudsters' attack methods.

Kevin Mitnick to sell zero-day exploits

Kevin Mitnick's new venture will develop and procure zero-day exploits, then sell them for $100,000 or more.

FBI warns of potential cyber attacks launched by ISIS hacktivists

Following U.S. military airstrikes in the Middle East, the FBI has issued a warning regarding possible cyber threats aimed at U.S. networks and critical infrastructure by hacktivists in support of ISIS.