False Start For Cyber Security Challenge UK

An anonymous reader writes "Netcraft writes about an ironic 'false start' for the Cyber Security Challenge UK website. The new venture touts itself as 'a programme of national challenges, designed by experts, to identify and nurture the UK's future cyber security workforce.' Unfortunately, the website appears to be vulnerable to a basic cross-site scripting vulnerability which was easily found by some Twitter users."

Comments

Sigh

[bbqsrc]

Of the four paragraphs in the article, there's one entirely about how the toolbar run by the website will protect you from XSS, and hardly goes into detail about anything amusing at all. It's not even that good of an XSS hole... simply boring.

Donkeys seeking to recruit lions

[Rogerborg]

Well, I guess if they had competent IT people, they wouldn't be looking to hire any. Seems pretty axiomatic.

There are none

[h00manist]

There are no competent people, no secure or quality products, and no certain outcomes. Get over it and get to work trying to get whatever result you want, or to drinking beer. Either way, everything will end up somewhere. Try not to do it with guns, and nobody will die, that way you can try again.