I am a app developer and working with another software group at my MEGACOMPANY. Said group wants to put confidential information on the internet and they are very happy with their authentication system which just blocks that content from our normal customers based on IP address.
I have already cracked their system yet the bosses at MEGACOMPANY tell me that I can crack any system so me getting into the content doesn't equate to a security issue (please giggle a little).
I am asking for SSO authentication as we have on 99% of our sites. They want to keep current system for a variety of reasons. How secure do you believe this site to be? Also are there methods that robots or joe-average-instigator would use to gain access to the information?