Thread: Hunting and fishing web site hacked

Includes the release of credit card numbers. What a bunch of useless bastards.

http://www.huntingandfishing.co.nz

Bit of a worry

Thought responsible businesses didn't hold your card details.

Originally Posted by tetawa

Thought responsible businesses didn't hold your card details.

They might not be holding them as such but while the transaction is pending the details will be there i think.

Shame, the website clearly had problems, but looked like the start of something reasonable. I think a good website is absolutely key to this kind of business. If I was a business owner, I would make it a very high priority.

I'm not at all surprised by this, it's always been a badly maintained website and it's still using outdated versions of PHP and JQuery.

I can't say I was impressed with their website anyway - amazing considering how big the company and how much they make each year.

Glad I never use them😆

Sent from my SM-G900F using Tapatalk

Also not surprised at all.

I looked at their site, their hosting company etc, when they were having outages, and a lot of alarm bells were ringing.
Luckily we have a H&F just down the road, so I didn't need to use their site to buy anything.

Call me paranoid, but qualys ssl scan is always a good place to start if you're in doubt about how seriously a company takes security. This may speak volumes:

Originally Posted by quentin

Also not surprised at all.

I looked at their site, their hosting company etc, when they were having outages, and a lot of alarm bells were ringing.
Luckily we have a H&F just down the road, so I didn't need to use their site to buy anything.

Call me paranoid, but qualys ssl scan is always a good place to start if you're in doubt about how seriously a company takes security. This may speak volumes:
Attachment 52365

Just out of interest could you please run the same check on NZHS (should give a high score) and a couple of the notable NZ Gun Shops with online shopping and let us know the results.

Sure thing. Give me 5

NZHS - A- rating if the certificate was trusted. You get that with a self signed cert with no root CA or chain certificates in place. Lucky this is not an e-commerce site!


Next up - guncity

Guncity - no, no, no!


Reloaders next

Better, but I would be happier seeing an A or A+
Reloaders use Zeald to do their ecommerce side of the website.

This is what you want to see ideally.