True....the use of a Flash Movie does indeed add a certain degree of
control....and the encryption of your templates (although secure when an
error is displayed not so secure as a simple search on Google can yield
a decryptor).

You are still open for session highjacking via the copy n paste of CFID
/ CFTOKEN as they are visible always.  We also see you are using
ColdFusion MX 6,1,0,hf52972_61 on a Jrun instance....

I am not advocating hacking or server abuse but remember that these tiny
snippets of info can yield frightening results.



Louis Mezo wrote:

>The LogicSynthesis site is more procedural than oo, on purpose.
>
>As far as IHRCO is concerned, I can't control what other people do with
>their websites. I link to IHRCO simply because they are a former client.
>
>You'll need to do better than that to make me look bad ;-) Try and crack
>LogicSynthesis, then get back to me, son.
>
>
>
>Thanks,
>Louis Mezo
>LogicSynthesis
>Tel: 240.498.8951
>[EMAIL PROTECTED]
>http://www.logicsynthesis.com
>
>
>  -----Original Message-----
>  From: Adam Haskell [mailto:[EMAIL PROTECTED]
>  Sent: Tuesday, September 07, 2004 1:52 PM
>  To: CF-Jobs-Talk
>  Subject: Re: Senior CF/StudioMX2004 Developer available
>
>
>  I wasn't going to say but yeah pretty much...at the very least
>  everyone should have Enable Robust Exception Information UNCHECKED on
>  a production server.
>
>  Adam H
>
>  On Tue, 07 Sep 2004 11:40:11 -0600, Kwang Suh <[EMAIL PROTECTED]> wrote:
>  > Hmm, try this out:
>  >
>  > http://www.ihrco.com/properties/index.cfm?Prop_ID=122;
>  >
>  >
>
>
>
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings] [Donations and Support]

Reply via email to