Security of Malaysian Websites
Filed in: Malaysia, Security — June 17th, 2005
theStar website and webmail has found several security vulnerabilities by local hackers. What is the problem with local websites?
Thanks to ShaolinTiger, now I know how easy to hack a theStar email accounts. I am quite surprised that their webmail system is so… hackable. You don’t need any skill to hack, just copy & paste then you own the account! 
On the other hand, another website by theStar – Global Malaysians Network also found several security vulnerabilities. Anyway, it has been fixed, according to the announcement.
Global Malaysians Network is a project to link Malaysian globally. The web design has been reviewed by CheeAun.
Thought:
I don’t remember I have been taught about “secure programming” in college. The college course only teach you how to done it, no matter what method or tricks you use. Security? Never mention. As long as it works then ok lah~
Under such education, we produces a bunch of programmers who only make the things works but ignore the security issues behind it.
On the other hand, most companies do not have awareness of security problem. They add locks to their doors, install CCTV but they forgot their websites. As long as the website looks good(read: fancy flash animation), then it’s fine. Security? I doubt they have ever think about it.
Of course, there are good programmers and good companies (who care about website/software security) but that’s minor group.
By the way, I am NOT security expert. Head to HITB for security advices. 
