Cashless parking app in Bournemouth withdrawn due to security issues

Cashless parking app in Bournemouth withdrawn due to security issues

Cashless parking app in Bournemouth withdrawn due to security issues

First published in News

A CASHLESS parking app, which was used by motorists in Bournemouth car parks, has been disabled because of IT security issues.

The Phone and Pay service, which allowed people to book spaces using their smart phone, was withdrawn from Apple’s App store after Bournemouth-based app developer Matt Cheetham claimed it was a ‘security nightmare’. Bemrose Mobile, the firm behind the app, and Bournemouth council say there has been no security breach and no credit card details have been compromised.

However, Bournemouth council has said it is undertaking an ‘urgent investigation’ and will consider whether the matter should be referred to the Information Commissioner’s Office.

Matt, 22, started investigating the app after experiencing problems trying to use it. “I quickly realised there wasn’t any security on their server,” he said. “All you had to do was go on a website, type in your mobile number and you could retrieve information.”

Gary Powell, head of traffic management at Bournemouth council, said, “We have received assurances that the app was disabled as soon as issues arose and there was no security breach.”

Comments (7)

Please log in to enable comment sorting

1:06pm Tue 4 Mar 14

B.F.G says...

This issue was fixed a few weeks back, yes it was an inconvenience at the time, but the app has been updated, end of (non) story.
This issue was fixed a few weeks back, yes it was an inconvenience at the time, but the app has been updated, end of (non) story. B.F.G
  • Score: -10

1:39pm Tue 4 Mar 14

PokesdownMark says...

Very much a story for two reasons:

1 the council failed to properly perform due diligence on the app. Even the non-security features had issues. If you bought a months pass for one car park, lets say for work, you were unable to start any other for parking in another car park for parking at the weekend. In short the council put significant financial risk and a degree of personal safety risk on their customers because of their lack of effort. Just to save a few pennies. Sadly many other councils did the same.

2 it is nonsense to say there has been no data breach. The method was very simple to exploit. The people who may have been taking advantage are not going to put their hands up and say so!
Very much a story for two reasons: 1 the council failed to properly perform due diligence on the app. Even the non-security features had issues. If you bought a months pass for one car park, lets say for work, you were unable to start any other for parking in another car park for parking at the weekend. In short the council put significant financial risk and a degree of personal safety risk on their customers because of their lack of effort. Just to save a few pennies. Sadly many other councils did the same. 2 it is nonsense to say there has been no data breach. The method was very simple to exploit. The people who may have been taking advantage are not going to put their hands up and say so! PokesdownMark
  • Score: 12

1:58pm Tue 4 Mar 14

jpm2067 says...

Oh come one Echo - this feels like half the story - why don't you help your readers understand what is actually happening now?

I still have access to the app and it seems to be working. Are we to stop using the app? Your article suggests that it was withdrawn from the app store on Apple - but its still there on Android from their website. You also report that the council said the app was disabled as soon as the issue arose.

So where have you helped the reader here about covering the story and included advice if they have got it or used it? I may have missed this or maybe thought you would help your readers, but to me you have written a story that doesn't give people reassurance and confirmation of what has happened or is planned to fix it.
Oh come one Echo - this feels like half the story - why don't you help your readers understand what is actually happening now? I still have access to the app and it seems to be working. Are we to stop using the app? Your article suggests that it was withdrawn from the app store on Apple - but its still there on Android from their website. You also report that the council said the app was disabled as soon as the issue arose. So where have you helped the reader here about covering the story and included advice if they have got it or used it? I may have missed this or maybe thought you would help your readers, but to me you have written a story that doesn't give people reassurance and confirmation of what has happened or is planned to fix it. jpm2067
  • Score: 4

4:17pm Tue 4 Mar 14

Phixer says...

B.F.G wrote:
This issue was fixed a few weeks back, yes it was an inconvenience at the time, but the app has been updated, end of (non) story.
It is an issue when non-commercial minded public serpents try to be smart and make a pig's ear of it. It's not only your money and my money being spent on this app, it's yet another public serpent slack approach to security.
[quote][p][bold]B.F.G[/bold] wrote: This issue was fixed a few weeks back, yes it was an inconvenience at the time, but the app has been updated, end of (non) story.[/p][/quote]It is an issue when non-commercial minded public serpents try to be smart and make a pig's ear of it. It's not only your money and my money being spent on this app, it's yet another public serpent slack approach to security. Phixer
  • Score: 2

4:50pm Tue 4 Mar 14

Jimeneyp says...

B.F.G wrote:
This issue was fixed a few weeks back, yes it was an inconvenience at the time, but the app has been updated, end of (non) story.
The app isn't working still, you get to the point where you enter the location code and it won't progress any further.

If the council had stuck with RingGo then there wouldn't be any issues at all. If it's not broken then don't fix it!!!!
[quote][p][bold]B.F.G[/bold] wrote: This issue was fixed a few weeks back, yes it was an inconvenience at the time, but the app has been updated, end of (non) story.[/p][/quote]The app isn't working still, you get to the point where you enter the location code and it won't progress any further. If the council had stuck with RingGo then there wouldn't be any issues at all. If it's not broken then don't fix it!!!! Jimeneyp
  • Score: 10

6:41am Wed 5 Mar 14

Jetwasher says...

You must be mad if you think you could trust the council with your credit card details to pay for parking….
You must be mad if you think you could trust the council with your credit card details to pay for parking…. Jetwasher
  • Score: 3

5:12pm Wed 5 Mar 14

kevinmitnick says...

Clearly Matt is a hacker and should be arrested and investigated.
Clearly Matt is a hacker and should be arrested and investigated. kevinmitnick
  • Score: -1

Comments are closed on this article.

Send us your news, pictures and videos

Most read stories

Local Info

Enter your postcode, town or place name

About cookies

We want you to enjoy your visit to our website. That's why we use cookies to enhance your experience. By staying on our website you agree to our use of cookies. Find out more about the cookies we use.

I agree