Comments on ƴƈ, ∃ and ∀: The guys behind the new Maybank2U, please read

I guess the guys behind M2U have no idea what are ...

2008-10-20T18:54:00.000-07:00

I guess the guys behind M2U have no idea what are XSS and XSRF, anyway... haha

I guess people are worried of the quality of work ...

2008-10-20T06:54:00.000-07:00

I guess people are worried of the quality of work being produced. Security is a big thing and if these guys could not handle good at the front-end level, we won't know how much loopholes could be created by them.
Think about XSS and XSRF too.

Pretty valid assumption.

yc

Then its SAD to see some other people condemning t...

2008-10-20T06:50:00.000-07:00

Then its SAD to see some other people condemning the security vendor and the development unit for what seems to be an application error.It is damn slow anyway. Glad you highlighted it tho.

Hi there,

Whether there's a security issue ...

2008-10-20T05:40:00.000-07:00

Hi there,

Whether there's a security issue behind this new site, I do not know. I'm not a security expert.

yc

so is it a serious security issue?

2008-10-20T05:36:00.000-07:00

so is it a serious security issue?

I actually did a google search and found some guys...

2008-10-20T00:31:00.000-07:00

I actually did a google search and found some guys wanted to use Struts within BroadVision. So I would suspect they have their own J2EE app server.

It's still a wild guess afterall.

yc

yc: BroadVision is the vendor's name, look at the ...

2008-10-20T00:30:00.000-07:00

yc: BroadVision is the vendor's name, look at the stack trace at com.broadvision.servlet... kinda of naming convention for company's packaging name.

anak perelih: Look like it's something called Broa...

2008-10-19T23:56:00.000-07:00

anak perelih: Look like it's something called BroadVision. Something app server that I have never heard of.

yc

I manage to get the actual display on the "ac...

2008-10-19T23:37:00.000-07:00

I manage to get the actual display on the "account & banking" tab... but it's terribly slow.. so i did my transaction on the classic M2U.. although it's slow too but can make the transaction go thru... (maybe affected by the new version problem too). What apps server they are using?

the same I have yesterday..

2008-10-19T21:42:00.000-07:00

the same I have yesterday..

I was able to reproduce the error with:

Col...

2008-10-17T21:35:00.000-07:00

I was able to reproduce the error with:

Collections.emptyList().get(0);

The stack trace generated is:

Exception in thread "main" java.lang.IndexOutOfBoundsException: Index: 0
at java.util.Collections$EmptyList.get(Collections.java:2975)
at Maybank2uIsOneEpicFailure.main(Maybank2uIsOneEpicFailure.java:14)

Now, I'm not sure that's a fluke or pure incompetency. Worries me that code like this exists in a banking app...

Comments on ƴƈ, ∃ and ∀: The guys behind the new Maybank2U, please read

I guess the guys behind M2U have no idea what are ...

I guess people are worried of the quality of work ...

Then its SAD to see some other people condemning t...

Hi there,Whether there's a security issue ...

so is it a serious security issue?

I actually did a google search and found some guys...

yc: BroadVision is the vendor's name, look at the ...

anak perelih: Look like it's something called Broa...

I manage to get the actual display on the "ac...

the same I have yesterday..

I was able to reproduce the error with:Col...

Hi there,

Whether there's a security issue ...

I was able to reproduce the error with:

Col...