We were just contacted by a research group formed by Ben Adida at Harvard University, Adam Barth at Berkeley University and Collin Jackson at Stanford University. They alerted us of a security issue concerning the Passpack It! button (aka 1Click Login bookmarklet). We fixed it immediately. How the issue was discovered — The three researchers [...]
Since Yesterday, PayPal is not sending us confirmation notification of the payments. So the system is unable to update the status of the accounts. We could do this manually, but when PayPal will solve the issue, it will probably send all the notifications and this could create worse issues. So, we are waiting for a while. If nothing happens, we will fix the updates manually.
UPDATE, Jan. 29. The strategy worked because PayPal sent all the notification at one moment, and all the accounts have been upgraded correctly.
We completed the performance improvement of Passpack moving the static files on a new server. This improves also the general security because it is now much harder for an attacker to try to inject Javascript code.
Passpack has discontinued Google Gears support. It was used with slow browsers like Internet Explorer 6 or 7. If you use one of these browsers, probably your account will become really slow without Google Gears. We strongly suggest to upgrade to IE 9 or to a totally different browser like Chrome.
Follow-up to the last post, the billing system is completely functional again. Happy Tuesday!
©2006-2013 Passpack Srl, IT09762401009. We're happy to participate in the open source community.
