Slashdot Mirror

← Back to Stories (view on slashdot.org)

Danish Bank Leaves Server In Debug Mode, Exposes Sensitive Data In JS Comments

Posted by Soulskill on from the in-the-case-of-face-v.-palm dept.

An anonymous reader writes: Dutch IT security expert Sijmen Ruwhof has found a pretty big blunder on the part of Danske Bank, Denmark's biggest bank, which exposed sensitive user session information in the form of an encoded data dump, in their banking portal's JavaScript files. The data contained client IP addresses, user agent strings, cookie information, details about the bank's internal IT network, and more. He contacted the bank, who fixed the issue, but later denied it ever happened.

2 of 41 comments (clear)

  1. Somethings rotten by Anonymous Coward · · Score: 0, Redundant

    In Denmark.

  2. Re:Similar experience here by Anonymous Coward · · Score: 0, Redundant

    Whenever I get modpoints, I'll just mod all your posts as troll until you stop setting the font.