In reply to Robin Cernin.

Hi Robin,

In all I turned in 14 security vulnerabilities to United, and they just confirmed 2 additional ones; one of which is probably the same miles value or close to the first one. The bugs in themselves, while common issues, were distinct to United and their apps.

I'd be happy to discuss the bugs if United decides it's ok after the other fixes go in, though I think how and why I discovered them, and not necessarily the individual bugs would be a much richer topic within the info community.

I think it's safe to say that with the internet growing older, and many sites now having an online presence reaching perhaps as far back as 15-20 years, there are definite takeaways about how and why it's important for site owners to take as much care decommissioning old sites with the same rigor that new sites are built in their place. When it comes to web security, the past can most definitely come back to haunt.