Hacking websites with your company name

Wtf Theo how many videos were made in advance? Wow.

For clarity that Theo completely overlooked. Company House wasnt vulnerable, 3rd party sites that index, read and stuff from Company house was vulnerable. And instead of fixxing their own shit they complained to Company house and instead of pushing back for them to fix their own shit, Company house removed the name entries.

I guess the reason the name was changed is that the Companies House has an open API and the name poses a security risk to OTHER applications.

Ask any Irish person with an apostrophe in their name how name websites they've broken. I had to call an antivirus sales website to get directly in touch with the sysadmin so they could remove an apostrophe in the DB directly. The sign-up page allowed the character, but the login didn't.

Video starts at 3:09 btw. You’re welcome

4:24 "only government code" are you sure about that?

Companies house ≠ The House Of Lords. Apologies for the nitpick 😢

The UKs gov website is actually quite secure. They were the first to really do digital services and they put a lot of effort into it. They may not look spectacular, but thats because it's focused on performance, security, and accessibility.

Seems like the Company House wasn't the issue, but consumers of their data products.

brb naming a company "Company name available on request"