Trade Me unsecure?

Forums › Off topic › Trade Me unsecure?

1 | 2 | 3 | 4

lyonrouge

1993 posts

Uber Geek
+1 received by user: 20

Trusted

Lifetime subscriber

#990537 19-Feb-2014 15:12

I've only used that on PCs, I didn't know they had a mobile client

kenkeniff

628 posts

Ultimate Geek
+1 received by user: 88

#990541 19-Feb-2014 15:14

lyonrouge: I've only used that on PCs, I didn't know they had a mobile client

You run it on your pc and filter the requests from your mobile device on the same wifi network.

lyonrouge

1993 posts

Uber Geek
+1 received by user: 20

Trusted

Lifetime subscriber

#990542 19-Feb-2014 15:15

ah, of course

kenkeniff

628 posts

Ultimate Geek
+1 received by user: 88

#990544 19-Feb-2014 15:20

lyonrouge: ah, of course

To answer the OP heading though; yes...

At the very least it's riddled with CSRF vulnerabilities which allows for some interesting exploits..

kyhwana2

2572 posts

Uber Geek
+1 received by user: 233

#990702 19-Feb-2014 19:38

lyonrouge:
PaulBags: Would still appreciate secured logins & for https to not just redirect to http.

Oh well, I don't think much of trademe anyway. Been years since I bought anything there, and longer still since I sold anything.

They requested I login and update my address valuidation, but it's still unencrypted. I wonder if their mobile application is also unencrypted? Is their a way to tell?

I just tested the latest TM android app and it appears to do SSL properly. (It's doing proper SSL and I can't MITM it with a fake certificate)

Geektastic

18010 posts

Uber Geek
+1 received by user: 8468

Trusted

Lifetime subscriber

#990833 19-Feb-2014 23:25

Considering how much TM charges these days I would expect state of the art!

1 | 2 | 3 | 4