Post
Topic
Board Micro Earnings
Re: WmZona Microwallet Service micropayments and faucets, support faucetbox API.
by
Kazuldur
on 20/11/2016, 12:36:46 UTC

hi,
you can rename your  "project" to Kamikaze Microwallet service also, without HTTPS  Tongue



+1, using this is suicide. No HTTPS and it looks like they're hosting a bunch of other stuff on the same server (it doesn't even have it's own domain) together with other stuff.

We have added SSL support.

You didn't deploy HTTPS correctly, you're vulnerable to https://blog.cloudflare.com/yet-another-padding-oracle-in-openssl-cbc-ciphersuites/ . There are more problems (check https://www.ssllabs.com/ssltest/analyze.html?d=wmzona.com ), but this one is critical.