The official website for purchasing train tickets, 12306.cn, has come under fire after wooyun.org, a domestic internet security monitoring platform discovered several vulnerabilities that has allowed user information such as usernames, passwords and email information to be leaked.
After the assessment, wooyun.org classed the website as at ‘high-risk’.
Spokespeople from the website have blamed third-party websites for the information leak, as all information in 12306.cn’s database is encrypted.
12306.com, the only website available to buy train tickets has already been criticised as it frequently crashes under the sheer volume of people attempting to log on at peak times.
The website has suggested that in order to prevent further leaks, users should avoid using third-party websites to buy tickets and should frequently change their password.
The Railway Public Security Bureau announced this morning that it has already detained two suspects linked to the leak, and will be putting extra security measures in place, including extra stringent ID card checks at stations and a function that will allow passengers to report ID fraud on their website.
Source: news.163.com
Warning：The use of any news and articles published on eChinacities.com without written permission from eChinacities.com constitutes copyright infringement, and legal action can be taken.
Keywords: Train Ticket website 12306 data leak
All comments are subject to moderation by eChinacities.com staff. Because we wish to encourage healthy and productive dialogue we ask that all comments remain polite, free of profanity or name calling, and relevant to the original post and subsequent discussion. Comments will not be deleted because of the viewpoints they express, only if the mode of expression itself is inappropriate.
Please login to add a comment. Click here to login immediately.
".....users should avoid using third-party websites to buy tickets". So don't use popular travel websites like Ctrip? Only the official government is trustworthy? But what about those local and non-local people who can't read Mandarin or who can't understand the system? Those 3rd party services are useful to people who aren't the majority.
Dec 29, 2014 09:20 Report Abuse
Sign up with
Google
(
(