Post

Robin Berjon
@robin.berjon.com

It looks like W Identity, the part of @wsocial.eu that checks your papers before you go in, has a very basic XSS on its admin backend, found hours after launch. This seems almost too predictable... Cyberfriends, any thoughts on how bad? 23.social/@kantorkel/1...

23.socialkantorkel (@kantorkel@23.social)#widentity ist ein digital identity provider, der ein geschäftliches Interesse an einem Internet hat, das möglichst wenig anonym ist. Nebenbei basteln sie an #wsocial, um Identitäten einzusammeln htt...
Tim Trautmann
@timtrautmann.com

As far as I know, they outsourced engineering to war-torn Ukraine because it's likely too expensive to build in the EU. Not that that is necessarily a bad thing; the Ukrainians need all the support they can get.

Robin Berjon
@robin.berjon.com

Outsourcing to Ukraine is perfectly fine IMHO. But you need to handle identity with care no matter what.

1 repost11 likes

Tim Trautmann
@timtrautmann.com

Agreed. There are some incredibly talented developers in Ukraine. But there are also pretty bad actors selling their services at rock bottom prices. I wonder who the vendor is that they chose for this.