Saturday, January 21, 2006

Security Through Obscurity

I didn't get the receipt for an online insurance premium payment that I had made recently, so I went to the LIC home page to find a phone number I could call regarding this. But instead of a number, I found something even better: a link called 'Next Due', which would tell me the status of my payment without my having to talk to someone. On clicking on this link, I was prompted for my policy number (note: no login/registration required), and on entering the number, I was shown the premium amount, the date of the most recent payment and the date by which the next premium was due.

Neat. Only problem is, this information is available for the whole world to see.