...con username, password e codice fiscale in chiaro nell'url...

https://www.passaportonline.poliziadistato.it/LogInAction.do?username=pippo&password=passpippo&codiceFiscale=wwewer56p45w456o&codop=logUtente


-- 
Paolo Giardini | EUCIP Certified Professional | CCOS Regione Umbria
Privacy Officer AIP/ICTS | Direttore Osservatorio Privacy Sicurezza IT
AIP/ITCS | CLUSIT | GLUG Perugia | AIPSI | ISSA | ILS | BackTrack.it
http://blog.solution.it|Cel.337.652876|Fax 075.93831174|skype pgiardini


Attachment: signature.asc
Description: OpenPGP digital signature

________________________________________________________
http://www.sikurezza.org - Italian Security Mailing List

Rispondere a