Serious security breaches discovered in another Betfair Cert

[osknows]

Not sure if anyone has spotted this on the Betfair forum

http://community.betfair.com/general_be ... comeHeader#flvWelcomeHeader

Not sure what the other ones are/were?

[kiint]

He'd posted on his forum about this quite a while ago and although I can't remember the details, I think at the time that I didn't think that it was too big a deal and nothing for me to worry about.
I must admit to being a bit cynical about his announcement and can't help thinking that maybe sales aren't so good and he's trying to up his market penetration with a short loss leader.

[osknows]

I'm more interested to know if this is a genuine Betfair issue or if a vendor has screwed up and is hitting out?

[GaryRussell]

The security breach as I understand it was the user id and password were transmitted unencrypted by an API product (not ours!). Betting Assistant transmits the login details encrypted. It is no more and no less secure than using Betfair's website.

[Captain Sensible]

Not that tech minded with HTTPS but I thought all requests to the API were via HTTPS so surely it must have taken a bit of doing to make their requests unencrypted and not secure?

Does anyone know what the software was, guess it's not one of the bigger apps otherwise the geek would have been more than happy to say who it was.

Betfair have now removed the post and stated there's no issues so I can only assume it was another geek marketing push unless he posts more details of these so called 'security issues' Might be worth you reiterating your post into the BA splash screen, Gary, just to assure users there are no issues with BA as you know how these things can spread once rumours get put out there.

[Captain Sensible]

3rd Party Vendor Applications and use of The Betfair API – Update


Betfair Customer Services
16 Aug 13 10:38

Yesterday a posting was made titled “Geeks Toy- Security Issues”. This has now been removed as it contravenes our terms and conditions relating to the promotion of third party products and services. The issue raised is historical and has been rectified. Any customers potentially affected were contacted by both the third party vendor and Betfair offering suitable advice. We are not aware of any existing security issues with any licensed third party API products. If you have any further questions please email bets@betfair.com.

[peleus]

Invalid thread. Please go back.

I guess they already took it out.